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DESCRIPTION 
ELEVATOR CONTROL APPARATUS 

Technical Field 

The present invention relates to an elevator control apparatus 
having a power supply voltage monitoring circuit for monitoring 
a power supply voltage. 

Background Art 

In a conventional elevator door control apparatus disclosed 
in, for example, JP 3-256992 A, a voltage monitoring circuit monitors 
a power supply voltage of a door driving motor, and forcible braking 
means brakes the door driving motor when an abnormality in the power 
supply voltage is detected. 

However, in a door control apparatus as described above, when 
an abnormality occurs in the voltage monitoring circuit itself, 
for example, an output signal of the monitored result is fixed to 
the side indicating a normal state, the voltage cannot be monitored 
normally until that abnormality is eliminated. 

Therefore, application of a conventional monitoring system 
to essential components of elevator control apparatuses such as 
an operation control unit and a safety unit is insufficient in 
reliability. 
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Disclosure of the Invention 

The present invention is made to solve the problem described 
above. Therefore, it is an object of the present invention to obtain 
an elevator control apparatus capable of enhancing reliability of 
the monitoring a power supply voltage. 

According to the present invention, an elevator control 
apparatus comprises: a processing portion for performing a 
processing relating to control of an elevator; a power supply voltage 
monitoring circuit for monitoring a power supply voltage supplied 
to the processing portion; and a voltage monitoring soundness 
checking function circuit which is adapted to output a monitoring 
input voltage forcible change signal for forcibly changing a power 
supply voltage input to the power supply voltage monitoring circuit 
in response to a control signal from the processing portion and 
to which a voltage abnormality detection signal from the power supply 
voltage monitoring circuit is input, the voltage monitoring 
soundness checking function circuit holds at least some of contents 
of signals exchanged between the processing portion and the power 
supply voltage monitoring circuit, and the processing portion checks 
soundness of the power supply voltage monitoring circuit by reading 
data held by the voltage monitoring soundness checking function 
circuit . 

Brief Description of the Drawings 
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Fig. 1 is a schematic diagram showing an elevator apparatus 
according to Embodiment 1 of the present invention. 

Fig. 2 is a front view showing the safety device of Fig. 1. 

Fig. 3 is a front view showing the safety device of Fig. 2 
that has been actuated. 

Fig. 4 is a schematic diagram showing an elevator apparatus 
according to Embodiment 2 of the present invention. 

Fig. 5 is a front view showing the safety device of Fig. 4. 

Fig. 6 is a front view showing the safety device of Fig. 5 
that has been actuated. 

Fig. 7 is a front view showing the drive portion of Fig. 6. 

Fig. 8 is a schematic diagram showing an elevator apparatus 
according to Embodiment 3 of the present invention. 

Fig. 9 is a schematic diagram showing an elevator apparatus 
according to Embodiment 4 of the present invention. 

Fig. 10 is a schematic diagram showing an elevator apparatus 
according to Embodiment 5 of the present invention. 

Fig. 11 is a schematic diagram showing an elevator apparatus 
according to Embodiment 6 of the present invention. 

Fig. 12 is a schematic diagram showing another example of the 
elevator apparatus shown in Fig. 11. 

Fig. 13 is a schematic diagram showing an elevator apparatus 
according to Embodiment 7 of the present invention. 

Fig. 14 is a schematic diagram showing an elevator apparatus 



according to Embodiment 8 of the present invention. 

Fig. 15 is a front view showing another example of the drive 
portion shown in Fig. 7. 

Fig. 16 is a plan view showing a safety device according to 
Embodiment 9 of the present invention. 

Fig. 17 is a partially cutaway side view showing a safety device 
according to Embodiment 10 of the present invention. 

Fig. 18 is a schematic diagram showing an elevator apparatus 
according to Embodiment 11 of the present invention. 

Fig. 19 is a graph showing the car speed abnormality 
determination criteria stored in the memory portion of Fig. 18. 

Fig. 20 is a graph showing the car acceleration abnormality 
determination criteria stored in the memory portion of Fig. 18. 

Fig. 21 is a schematic diagram showing an elevator apparatus 
according to Embodiment 12 of the present invention. 

Fig. 22 is a schematic diagram showing an elevator apparatus 
according to Embodiment 13 of the present invention. 

Fig. 23 is a diagram showing the rope fastening device and 
the rope sensors of Fig. 22. 

Fig. 24 is a diagram showing a state where one of the main 
ropes of Fig. 23 has broken. 

Fig. 25 is a schematic diagram showing an elevator apparatus 
according to Embodiment 14 of the present invention. 

Fig. 26 is a schematic diagram showing an elevator apparatus 



according to Embodiment 15 of the present invention. 

Fig. 27 is a perspective view of the car and the door sensor 
of Fig. 26. 

Fig. 28 is a perspective view showing a state in which the 
car entrance 26 of Fig. 27 is open. 

Fig. 29 is a schematic diagram showing an elevator apparatus 
according to Embodiment 16 of the present invention. 

Fig. 30 is a diagram showing an upper portion of the hoistway 
of Fig. 29. 

Fig. 31 is a block diagram showing an essential part of an 
elevator control apparatus according to Embodiment 17 of the present 
invention. 

Fig. 32 is a circuit diagram showing an example of a concrete 
configuration of a voltage monitoring soundness checking function 
circuit in Fig. 31. 

Fig. 33 is a chart for explaining the meaning of data on 
respective bits in a data bus when a first CPU and a second CPU 
read data from the voltage monitoring soundness checking function 
circuit . 

Fig . 34 is a flowchart showing a method of checking power supply 
voltage monitoring soundness on the first CPU side in Fig. 31. 

Fig. 35 is a flowchart showing the operation in the case where 
the CPU's are reset in the elevator control apparatus of Fig. 31. 

Fig. 36 is a schematic diagram showing an elevator apparatus 



according to Embodiment 18 of the present invention. 

Best Modes for carrying out the Invention 

Hereinbelow^ preferred embodiments of the present invention 
are described with reference to the drawings. 
Embodiment 1 

Fig. 1 is a schematic diagram showing an elevator apparatus 
according to Embodiment 1 of the present invention. Referring to 
Fig. 1, a pair of car guide rails 2 are arranged within a hoistway 
1. A car 3 is guided by the car guide rails 2 as it is raised and 
lowered in the hoistway 1. Arranged at the upper end portion of 
the hoistway 1 is a hoisting machine (not shown) for raising and 
lowering the car 3 and a counterweight (not shown) . A main rope 

4 is wound around a drive sheave of the hoisting machine. The car 
3 and the counterweight are suspended in the hoistway 1 by means 
of the main rope 4 . Mounted to the car 3 are a pair of safety devices 

5 opposed to the respective guide rails 2 and serving as braking 
means. The safety devices 5 are arranged on the underside of the 
car 3. Braking is applied to the car 3 upon actuating the safety 
devices 5. 

Also arranged at the upper end portion of the hoistway 1 is 
a governor 6 serving as a car speed detecting means for detecting 
the ascending/descending speed of the car 3. The governor 6 has 
a governor main body 7 and a governor sheave 8 rotatable with respect 



to the governor main body 7 . A rotatable tension pulley 9 is arranged 
at a lower end portion of the hoistway 1 . Wound between the governor 
sheave 8 and the tension pulley 9 is a governor rope 10 connected 
to the car 3. The connecting portion between the governor rope 10 
and the car 3 undergoes vertical reciprocating motion as the car 
3 travels. As a result, the governor sheave 8 and the tension pulley 
9 are rotated at a speed corresponding to the ascending/descending 
speed of the car 3. 

The governor 6 is adapted to actuate a braking device of the 
hoisting machine when the ascending/descending speed of the car 
3 has reached a preset first overspeed. Further, the governor 6 
is provided with a switch portion 11 serving as an output portion 
through which an actuation signal is output to the safety devices 
5 when the descending speed of the car 3 reaches a second overspeed 
(set overspeed) higher than the first overspeed. The switch portion 
11 has a contact 16 which is mechanically opened and closed by means 
of an overspeed lever that is displaced according to the centrifugal 
force of the rotating governor sheave 8. The contact 16 is 
electrically connected to a battery 12, which is an uninterruptible 
power supply capable of feeding power even in the event of a power 
failure, and to a control panel 13 that controls the drive of an 
elevator, through a power supply cable 14 and a connection cable 
15, respectively. 

A control cable (movable cable) is connected between the car 



3 and the control panel 13. The control cable includes, in addition 
to multiple power lines and signal lines, an emergency stop wiring 

17 electrically connected between the control panel 13 and each 
safety device 5 . By closing of the contact 16, power from the battery 
12 is supplied to each safety device 5 by way of the power supply 
cable 14, the switch portion 11, the connection cable 15, a power 
supply circuit within the control panel 13, and the emergency stop 
wiring 17. It should be noted that transmission means consists of 
the connection cable 15, the power supply circuit within the control 
panel 13, and the emergency stop wiring 17. 

Fig. 2 is a front view showing the safety device 5 of Fig. 
1, and Fig. 3 is a front view showing the safety device 5 of Fig. 
2 that has been actuated. Referring to the figures, a support member 

18 is fixed in position below the car 3. The safety device 5 is 
fixed to the support member 18. Further, each safety device 5 
includes a pair of actuator portions 20, which are connected to 
a pair of wedges 19 serving as braking members and capable of moving 
into and away from contact with the car guide rail 2 to displace 
the wedges 19 with respect to the car 3, and a pair of guide portions 
21 which are fixed to the support member 18 and guide the wedges 

19 displaced by the actuator portions 20 into contact with the car 
guide rail 2. The pair of wedges 19, the pair of actuator portions 
20, and the pair of guide portions 21 are each arranged symmetrically 
on both sides of the car guide rail 2. 
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Each guide portion 21 has an inclined surface 22 inclined with 
respect to the car guide rail 2 such that the distance between it 
and the car guide rail 2 decreases with increasing proximity to 
its upper portion. The wedge 19 is displaced along the inclined 
surface 22. Each actuator portion 20 includes a spring 23 serving 
as an urging portion that urges the wedge 19 upward toward the guide 
portion 21 side, and an electromagnet 24 which, when supplied with 
electric current, generates an electromagnetic force for displacing 
the wedge 19 downward away from the guide member 21 against the 
urging force of the spring 23. 

The spring 23 is connected between the support member 18 and 
the wedge 19. The electromagnet 24 is fixed to the support member 
18. The emergency stop wiring 17 is connected to the electromagnet 
24. Fixed to each wedge 19 is a permanent magnet 25 opposed to the 
electromagnet 24. The supply of electric current to the 
electromagnet 24 is performed from the battery 12 (see Fig. 1) by 
the closing of the contact 16 (see Fig. 1) . The safety device 5 
is actuated as the supply of electric current to the electromagnet 
24 is cut off by the opening of the contact 16 (see Fig. 1) . That 
is, the pair of wedges 19 are displaced upward due to the elastic 
restoring force of the spring 23 to be pressed against the car guide 
rail 2- 

Next, operation is described. The contact 16 remains closed 
during normal operation. Accordingly, power is supplied from the 



battery 12 to the electromagnet 24. The wedge 19 is attracted and 
held onto the electromagnet 24 by the electromagnetic force generated 
upon this power supply, and thus remains separated from the car 
guide rail 2 (Fig. 2) . 

When, for instance, the speed of the car 3 rises to reach the 
first overspeed due to a break in the main rope 4 or the like, this 
actuates the braking device of the hoisting machine. When the speed 
of the car 3 rises further even after the actuation of the braking 
device of the hoisting machine and reaches the second overspeed, 
this triggers closure of the contact 16. As a result, the supply 
of electric current to the electromagnet 24 of each safety device 
5 is cut off, and the wedges 19 are displaced by the urging force 
of the springs 23 upward with respect to the car 3. At this time, 
the wedges 19 are displaced along the inclined surface 22 while 
in contact with the inclined surface 22 of the guide portions 21. 
Due to this displacement, the wedges 19 are pressed into contact 
with the car guide rail 2 . The wedges 19 are displaced further upward 
as they come into contact with the car guide rail 2, to become wedged 
in between the car guide rail 2 and the guide portions 21. A large 
frictional force is thus generated between the car guide rail 2 
and the wedges 19, braking the car 3 (Fig. 3) . 

To release the braking on the car 3, the car 3 is raised while 
supplying electric current to the electromagnet 24 by the closing 
of the contact 16. As a result, the wedges 19 are displaced downward, 
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thus separating from the car guide rail 2. 

In the above-described elevator apparatus, the switch portion 
11 connected to the battery 12 and each safety device 5 are 
electrically connected to each other, whereby an abnormality in 
the speed of the car 3 detected by the governor 6 can be transmitted 
as an electrical actuation signal from the switch portion 11 to 
each safety device 5, making it possible to brake the car 3 in a 
short time after detecting an abnormality in the speed of the car 
3. As a result, the braking distance of the car 3 can be reduced. 
Further, synchronized actuation of the respective safety devices 
5 can be readily effected, making it possible to stop the car 3 
in a stable manner. Also, each safety device 5 is actuated by the 
electrical actuation signal, thus preventing the safety device 5 
from being erroneously actuated due to shaking of the car 3 or the 
like . 

Additionally, each safety device 5 has the actuator portions 
20 which displace the wedge 19 upward toward the guide portion 21 
side, and the guide portions 21 each including the inclined surface 
22 to guide the upwardly displaced wedge 19 into contact with the 
car guide rail 2, whereby the force with which the wedge 19 is pressed 
against the car guide rail 2 during descending movement of the car 
3 can be increased with reliability. 

Further, each actuator portion 20 has a spring 23 that urges 
the wedge 19 upward, and an electromagnet 24 for displacing the 



wedge 19 downward against the urging force of the spring 23, thereby 
enabling displacement of the wedge 19 by means of a simple 
construction . 

Embodiment 2 

Fig, 4 is a schematic diagram showing an elevator apparatus 
according to Embodiment 2 of the present invention. Referring to 
Fig. 4, the car 3 has a car main body 27 provided with a car entrance 
26, and a car door 28 that opens and closes the car entrance 26. 
Provided in the hoistway 1 is a car speed sensor 31 serving as car 
speed detecting means for detecting the speed of the car 3. Mounted 
inside the control panel 13 is an output portion 32 electrically 
connected to the car speed sensor 31. The battery 12 is connected 
to the output portion 32 through the power supply cable 14 . Electric 
power used for detecting the speed of the car 3 is supplied from 
the output portion 32 to the car speed sensor 31 . The output portion 
32 is input with a speed detection signal from the car speed sensor 
31. 

Mounted on the underside of the car 3 are a pair of safety 
devices 33 serving as braking means for braking the car 3 . The output 
portion 32 and each safety device 33 are electrically connected 
to each other through the emergency stop wiring 17. When the speed 
of the car 3 is at the second overspeed, an actuation signal, which 
is the actuating power, is output to each safety device 33. The 



safety devices 33 are actuated upon input of this actuation signal. 

Fig. 5 is a front view showing the safety device 33 of Fig. 
4, and Fig. 6 is a front view showing the safety device 33 of Fig. 
5 that has been actuated. Referring to the figures, the safety device 
33 has a wedge 34 serving as a braking member and capable of moving 
into and away from contact with the car guide rail 2, an actuator 
portion 35 connected to a lower portion of the wedge 34, and a guide 
portion 36 arranged above the wedge 34 and fixed to the car 3. The 
wedge 34 and the actuator portion 35 are capable of vertical movement 
with respect to the guide portion 36. As the wedge 34 is displaced 
upward with respect to the guide portion 36, that is, toward the 
guide portion 36 side, the wedge 34 is guided by the guide portion 

36 into contact with the car guide rail 2. 

The actuator portion 35 has a cylindrical contact portion 37 
capable of moving into and away from contact with the car guide 
rail 2, an actuating mechanism 38 for displacing the contact portion 

37 into and away from contact with the car guide rail 2, and a support 
portion 39 supporting the contact portion 37 and the actuating 
mechanism 38. The contact portion 37 is lighter than the wedge 34 
so that it can be readily displaced by the actuating mechanism 38. 
The actuating mechanism 38 has a movable portion 4 0 capable of 
reciprocating displacement between a contact position where the 
contact portion 37 is held in contact with the car guide rail 2 
and a separated position where the contact portion 37 is separated 
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from the car guide rail 2, and a drive portion 41 for displacing 
the movable portion 40. 

The support portion 39 and the movable portion 40 are provided 
with a support guide hole 42 and a movable guide hole 43, respectively. 
The inclination angles of the support guide hole 42 and the movable 
guide hole 43 with respect to the car guide rail 2 are different 
from each other. The contact portion 37 is slidably fitted in the 
support guide hole 42 and the movable guide hole 43. The contact 
portion 37 slides within the movable guide hole 43 according to 
the reciprocating displacement of the movable portion 40, and is 
displaced along the longitudinal direction of the support guide 
hole 42. As a result, the contact portion 37 is moved into and away 
from contact with the car guide rail 2 at an appropriate angle. 
When the contact portion 37 comes into contact with the car guide 
rail 2 as the car 3 descends, braking is applied to the wedge 34 
and the actuator portion 35, displacing them toward the guide portion 
36 side. 

Mounted on the upperside of the support portion 39 is a 
horizontal guide hole 47 extending in the horizontal direction. 
The wedge 34 is slidably fitted in the horizontal guide hole 47. 
That is, the wedge 34 is capable of reciprocating displacement in 
the horizontal direction with respect to the support portion 39. 

The guide portion 36 has an inclined surface 44 and a contact 
surface 45 which are arranged so as to sandwich the car guide rail 



• 



2 therebetween. The inclined surface 44 is inclined with respect 
to the car guide rail 2 such that the distance between it and the 
car guide rail 2 decreases with increasing proximity to its upper 
portion. The contact surface 4 5 is capable of moving into and away 
from contact with the car guide rail 2. As the wedge 34 and the 
actuator portion 35 are displaced upward with respect to the guide 
portion 36, the wedge 34 is displaced along the inclined surface 
44 . As a result, the wedge 34 and the contact surface 45 are displaced 
so as to approach each other, and the car guide rail 2 becomes lodged 
between the wedge 34 and the contact surface 45. 

Fig. 7 is a front view showing the drive portion 41 of Fig. 
6. Referring to Fig. 7, the drive portion 41 has a disc spring 46 
serving as an urging portion and attached to the movable portion 
40, and an electromagnet 48 for displacing the movable portion 40 
by an electromagnetic force generated upon supply of electric current 
thereto. 

The movable portion 40 is fixed to the central portion of the 
disc spring 46. The disc spring 46 is deformed due to the 
reciprocating displacement of the movable portion 40. As the disc 
spring 4 6 is deformed due to the displacement of the movable portion 
40, the urging direction of the disc spring 46 is reversed between 
the contact position (solid line) and the separated position (broken 
line) - Themovable portion 40 is retained at the contact or separated 
position as it is urged by the disc spring 46. That is, the contact 
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or separated state of the contact portion 37 with respect to the 
car guide rail 2 is retained by the urging of the disc spring 46. 

The electromagnet 4 8 has a first electromagnetic portion 4 9 
fixed to the movable portion 40, and a second electromagnetic portion 
50 opposed to the first electromagnetic portion 49. The movable 
portion 40 is displaceable relative to the second electromagnetic 
portion 50. The emergency stop wiring 17 is connected to the 
electromagnet 48. Upon inputting an actuation signal to the 
electromagnet 48, the first electromagnetic portion 49 and the second 
electromagnetic portion 50 generate electromagnetic forces so as 
to repel each other. That is, upon input of the actuation signal 
to the electromagnet 48, the first electromagnetic portion 4 9 is 
displaced away from contact with the second electromagnetic portion 
50, together with the movable portion 40. 

It should be noted that for recovery after the actuation of 
the safety device 5, the output portion 32 outputs a recovery signal 
during the recovery phase. Input of the recovery signal to the 
electromagnet 48 causes the first electromagnetic portion 4 9 and 
the second electromagnetic portion 50 to attract each other. 
Otherwise, this embodiment is of the same construction as Embodiment 
1. 

Next, operation is described. During normal operation, the 
movable portion 40 is located at the separated position, and the 
contact portion 37 is urged by the disc spring 46 to be separated 



away from contact with the car guide rail 2 . With the contact portion 
37 thus being separated from the car guide rail 2, the wedge 34 
is separated from the guide portion 36, thus maintaining the distance 
between the wedge 34 and the guide portion 36. 

When the speed detected by the car speed sensor 31 reaches 
the first overspeed, this actuates the braking device of the hoisting 
machine. When the speed of the car 3 continues to rise thereafter 
and the speed as detected by the car speed sensor 31 reaches the 
second overspeed, an actuation signal is output from the output 
portion 32 to each safety device 33 . Inputting this actuation signal 
to the electromagnet 48 triggers the first electromagnetic portion 
4 9 and the second electromagnetic portion 50 to repel each other. 
The electromagnetic repulsion force thus generated causes the 
movable portion 40 to be displaced into the contact position. As 
this happens, the contact portion 37 is displaced into contact with 
the car guide rail 2. By the time the movable portion 40 reaches 
the contact position, the urging direction of the disc spring 46 
reverses to that for retaining the movable portion 4 0 at the contact 
position. As a result, the contact portion 37 is pressed into contact 
with the car guide rail 2, thus braking the wedge 34 and the actuator 
portion 35. 

Since the car 3 and the guide portion 36 descend with no braking 
applied thereon, the guide portion 36 is displaced downward towards 
the wedge 34 and actuator 35 side. Due to this displacement, the 



wedge 34 is guided along the inclined surface 44, causing the car 
guide rail 2 to become lodged between the wedge 34 and the contact 
surface 45. As the wedge 34 comes into contact with the car guide 
rail 2f it is displaced further upward to wedge in between the car 
guide rail 2 and the inclined surface 44. A large frictional force 
is thus generated between the car guide rail 2 and the wedge 34, 
and between the car guide rail 2 and the contact surface 45, thus 
braking the car 3. 

During the recovery phase, the recovery signal is transmitted 
from the output portion 32 to the electromagnet 48. This causes 
the first electromagnetic portion 4 9 and the second electromagnetic 
portion 50 to attract each other, thus displacing the movable portion 
40 to the separated position. As this happens, the contact portion 
37 is displaced to be separated away from contact with the car guide 
rail 2. By the time the movable portion 40 reaches the separated 
position, the urging direction of the disc spring 4 6 reverses, 
allowing the movable portion 40 to be retained at the separated 
position. As the car 3 ascends in this state, the pressing contact 
of the wedge 34 and the contact surface 45 with the car guide rail 
2 is released. 

In addition to providing the same effects as those of Embodiment 
1, the above-described elevator apparatus includes the car speed 
sensor 31 provided in the hoistway 1 to detect the speed of the 
car 3 . There is thereby no need to use a speed governor and a governor 
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rope, making it possible to reduce the overall installation space 
for the elevator apparatus. 

Further, the actuator portion 35 has the contact portion 37 
capable of moving into and away from contact with the car guide 
rail 2, and the actuating mechanism 38 for displacing the contact 
portion 37 into and away from contact with the car guide rail 2. 
Accordingly, by making the weight of the contact portion 37 smaller 
than that of the wedge 34, the drive force to be applied from the 
actuating mechanism 38 to the contact portion 37 can be reduced, 
thus making it possible to miniaturize the actuating mechanism 38. 
Further, the lightweight construction of the contact portion 37 
allows increases in the displacement rate of the contact portion 
37, thereby reducing the time required until generation of a braking 
force . 

Further, the drive portion 41 includes the disc spring 46 
adapted to hold the movable portion 4 0 at the contact position or 
the separated position, and the electromagnet 4 8 capable of 
displacing the movable portion 4 0 when supplied with electric current, 
whereby the movable portion 40 can be reliably held at the contact 
or separated position by supplying electric current to the 
electromagnet 48 only during the displacement of the movable portion 
40. 

Embodiment 3 
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Fig. 8 is a schematic diagram showing an elevator apparatus 
according to Embodiment 3 of the present invention- Referring to 
Fig. 8, provided at the car entrance 26 is a door closed sensor 
58, which serves as a door closed detecting means for detecting 
the open or closed state of the car door 28. An output portion 59 
mounted on the control panel 13 is connected to the door closed 
sensor 58 through a control cable. Further, the car speed sensor 
31 is electrically connected to the output portion 59. A speed 
detection signal from the car speed sensor 31 and an open/closed 
detection signal from the door closed sensor 58 are input to the 
output portion 59. On the basis of the speed detection signal and 
the open/closed detection signal thus input, the output portion 
59 can determine the speed of the car 3 and the open or closed state 
of the car entrance 26. 

The output portion 59 is connected to each safety device 33 
through the emergency stop wiring 17. On the basis of the speed 
detection signal from the car speed sensor 31 and the opening/closing 
detection signal from the door closed sensor 58, the output portion 
59 outputs an actuation signal when the car 3 has descended with 
the car entrance 26 being open. The actuation signal is transmitted 
to the safety device 33 through the emergency stop wiring 17. 
Otherwise, this embodiment is of the same construction as Embodiment 
2. 

In the elevator apparatus as described above, the car speed 



sensor 31 that detects the speed of the car 3, and the door closed 
sensor 58 that detects the open or closed state of the car door 
28 are electrically connected to the output portion 59, and the 
actuation signal is output from the output portion 59 to the safety 
device 33 when the car 3 has descended with the car entrance 2 6 
being open, thereby preventing the car 3 from descending with the 
car entrance 26 being open. 

It should be noted that safety devices vertically reversed 
from the safety devices 33 may be mounted to the car 3. This 
construction alsomakes it possible toprevent the car 3 f romascending 
with the car entrance 26 being open. 

Embodiment 4 

Fig. 9 is a schematic diagram showing an elevator apparatus 
according to Embodiment 4 of the present invention. Referring to 
Fig. 9, passed through the main rope 4 is a break detection lead 
wire 61 serving as a rope break detecting means for detecting a 
break in the rope 4 . A weak current flows through the break detection 
lead wire 61. The presence of a break in the main rope 4 is detected 
on the basis of the presence or absence of this weak electric current 
passing therethough. An output portion 62 mounted on the control 
panel 13 is electrically connected to the break detection lead wire 
61 . When the break detection lead wire 61 breaks , a rope break signal , 
which is an electric current cut-off signal of the break detection 



lead wire 61, is input to the output portion 62 . The car speed sensor 
31 is also electrically connected to the output portion 62. 

The output portion 62 is connected to each safety device 33 
through the emergency stop wiring 17. If the main rope 4 breaks, 
the output portion 62 outputs an actuation signal on the basis of 
the speed detection signal from the car speed sensor 31 and the 
rope break signal from the break detection lead wire 61. The 
actuation signal is transmitted to the safety device 33 through 
the emergency stop wiring 17. Otherwise, this embodiment is of the 
same construction as Embodiment 2. 

In the elevator apparatus as described above, the car speed 
sensor 31 which detects the speed of the car 3 and the break detection 
lead wire 61 which detects a break in the main rope 4 are electrically 
connected to the output portion 62, and, when the main rope 4 breaks, 
the actuation signal is output from the output portion 62 to the 
safety device 33. By thus detecting the speed of the car 3 and 
detecting a break in the main rope 4, braking can be more reliably 
applied to a car 3 that is descending at abnormal speed. 

While in the above example the method of detecting the presence 
or absence of an electric current passing through the break detection 
lead wire 61, which is passed through the main rope 4, is employed 
as the rope break detecting means, it is also possible to employ 
a method of, for example, measuring changes in the tension of the 
main rope 4. In this case, a tension measuring instrument is 

22 



installed on the rope fastening. 
Embodiment 5 

Fig. 10 is a schematic diagram showing an elevator apparatus 
according to Embodiment 5 of the present invention. Referring to 
Fig. 10, provided in the hoistway 1 is a car position sensor 65 
serving as car position detecting means for detecting the position 
of the car 3. The car position sensor 65 and the car speed sensor 
31 are electrically connected to an output portion 66 mounted on 
the control panel 13. The output portion 66 has a memory portion 
67 storing a control pattern containing information on the position, 
speed, acceleration/deceleration, floor stops, etc., of the car 
3 during normal operation. Inputs to the output portion 66 are a 
speed detection signal from the car speed sensor 31 and a car position 
signal from the car position sensor 65. 

The output portion 66 is connected to the safety device 33 
through the emergency stop wiring 17 . The output portion 66 compares 
the speed and position (actual measured values) of the car 3 based 
on the speed detection signal and the car position signal with the 
speed and position (set values) of the car 3 based on the control 
pattern stored in the memory portion 67. The output portion 66 
outputs an actuation signal to the safety device 33 when the deviation 
between the actual measured values and the set values exceeds a 
predetermined threshold. Herein, the predetermined threshold 



refers to the minimum deviation between the actual measurement values 
and the set values required for bringing the car 3 to a halt through 
normal braking without the car 3 colliding against an end portion 
of the hoistway 1. Otherwise, this embodiment is of the same 
construction as Embodiment 2. 

In the elevator apparatus as described above, the output 
portion 66 outputs the actuation signal when the deviation between 
the actual measurement values from each of the car speed sensor 
31 and the car position sensor 65 and the set values based on the 
control pattern exceeds the predetermined threshold, making it 
possible to prevent collision of the car 3 against the end portion 
of the hoistway 1. 

Embodiment 6 

Fig. 11 is a schematic diagram showing an elevator apparatus 
according to Embodiment 6 of the present invention. Referring to 
Fig. 11, arranged within the hoistway 1 are an upper car 71 that 
is a first car and a lower car 72 that is a second car located below 
the upper car 71. The upper car 71 and the lower car 72 are guided 
by the car guide rail 2 as they ascend and descend in the hoistway 
1. Installed at the upper end portion of the hoistway 1 are a first 
hoisting machine (not shown) for raising and lowering the upper 
car 71 and an upper-car counterweight (not shown) , and a second 
hoisting machine (not shown) for raising and lowering the lower 



car 72 and a lower-car counterweight (not shown) . A first main rope 
(not shown) is wound around the drive sheave of the first hoisting 
machine, and a second main rope (not shown) is wound around the 
drive sheave of the second hoisting machine. The upper car 71 and 
the upper-car counterweight are suspended by the first main rope, 
and the lower car 72 and the lower-car counterweight are suspended 
by the second main rope. 

In the hoistway 1, there are provided an upper-car speed sensor 
73 and a lower-car speed sensor 74 respectively serving as car speed 
detecting means for detecting the speed of the upper car 71 and 
the speed of the lower car 72. Also provided in the hoistway 1 are 
an upper-car position sensor 75 and a lower-car position sensor 
7 6 respectively serving as car position detecting means for detecting 
the position of the upper car 71 and the position of the lower car 
72. 

It should be noted that car operation detecting means includes 
the upper-car speed sensor 73, the lower-car sped sensor 74, the 
upper-car position sensor 75, and the lower-car position sensor 
76. 

Mounted on the underside of the upper car 71 are upper-car 
safety devices 77 serving as braking means of the same construction 
as that of the safety devices 33 used in Embodiment 2. Mounted on 
the underside of the lower car 72 are lower-car safety devices 78 
serving as braking means of the same construction as that of the 



upper-car safety devices 77. 

An output portion 7 9 is mounted inside the control panel 13. 
The upper-car speed sensor 73, the lower-car speed sensor 74, the 
upper-car position sensor 75, and the lower-car position sensor 

76 are electrically connected to the output portion 79. Further, 
the battery 12 is connected to the output portion 7 9 through the 
power supply cable 14. An upper-car speed detection signal from 
the upper-car speed sensor 73, a lower-car speed detection signal 
from the lower-car speed sensor 74, an upper-car position detecting 
signal from the upper-car position sensor 7 5, and a lower-car position 
detection signal from the lower-car position sensor 7 6 are input 
to the output portion 79 . That is, information from the car operation 
detecting means is input to the output portion 79. 

The output portion 7 9 is connected to the upper-car safety 
device 77 and the lower-car safety device 78 through the emergency 
stop wiring 17. Further, on the basis of the information from the 
car operation detecting means , the output portion 7 9 predicts whether 
or not the upper car 71 or the lower car 72 will collide against 
an end portion of the hoistway 1 and whether or not collision will 
occur between the upper car 71 and the lower car 72; when it is 
predicted that such collision will occur, the output portion 7 9 
outputs an actuation signal to each the upper-car safety devices 

77 and the lower-car safety devices 78 . The upper-car safety devices 
77 and the lower-car safety devices 78 are each actuated upon input 



of this actuation signal. 

It should be noted that a monitoring portion includes the car 
operation detecting means and the output portion 79. The running 
states of the upper car 71 and the lower car 72 are monitored by 
the monitoring portion. Otherwise, this embodiment is of the same 
construction as Embodiment 2. 

Next, operation is described. When input with the information 
f romthe car operation detecting means, the output portion 79 predicts 
whether or not the upper car 71 and the lower car 72 will collide 
against an end portion of the hoistway 1 and whether or not collision 
between the upper car and the lower car 72 will occur. For example, 
when the output portion 7 9 predicts that collision will occur between 
the upper car 71 and the lower car 72 due to a break in the first 
main rope suspending the upper car 71, the output portion 7 9 outputs 
an actuation signal to each the upper-car safety devices 77 and 
the lower-car safety devices 78. The upper-car safety devices 77 
and the lower-car safety devices 78 are thus actuated, braking the 
upper car 71 and the lower car 72. 

In the elevator apparatus as described above, the monitoring 
portion has the car operation detecting means for detecting the 
actual movements of the upper car 71 and the lower car 72 as they 
ascend and descend in the same hoistway 1, and the output portion 
79 which predicts whether or not collision will occur between the 
upper car 71 and the lower car 72 on the basis of the information 



from the car operation detecting means and, when it is predicted 
that the collision will occur, outputs the actuation signal to each 
of the upper-car safety devices 77 and the lower-car emergency devices 
78- Accordingly, even when the respective speeds of the upper car 
71 and the lower car 72 have not reached the set overspeed, the 
upper-car safety devices 7 7 and the lower-car emergency devices 
78 can be actuated when it is predicted that collision will occur 
between the upper car 71 and the lower car 12, thereby making it 
possible to avoid a collision between the upper car 71 and the lower 
car 72. 

Further, the car operation detecting means has the upper-car 
speed sensor 73, the lower-car speedsensor 74, the upper-car position 
sensor 75, and the lower-car position sensor 76, the actual movements 
of the upper car 71 and the lower car 72 can be readily detected 
by means of a simple construction. 

While in the above-described example the output portion 7 9 
is mounted inside the control panel 13, an output portion 7 9 may 
be mounted on each of the upper car 71 and the lower car 72. In 
this case, as shown in Fig. 12, the upper-car speed sensor 73, the 
lower-car speed sensor 74, the upper-car position sensor 75, and 
the lower-car position sensor 76 are electrically connected to each 
of the output portions 7 9 mounted on the upper car 71 and the lower 
car 72. 

While in the above-described example the output portions 7 9 
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outputs the actuation signal to each the upper-car safety devices 
77 and the lower-car safety devices 18, the output portion 79 may, 
in accordance with the information from the car operation detecting 
means, output the actuation signal to only one of the upper-car 
safety device 77 and the lower-car safety device 78. In this case, 
in addition to predicting whether or not collision will occur between 
the upper car 71 and the lower car 72, the output portions 79 also 
determine the presence of an abnormality in the respective movements 
of the upper car 71 and the lower car 72. The actuation signal is 
output from an output portion 7 9 to only the safety device mounted 
on the car which is moving abnormally . 

Embodiment 7 

Fig. 13 is a schematic diagram showing an elevator apparatus 
according to Embodiment 7 of the present invention. Referring to 
Fig- 13, an upper-car output portion 81 serving as an output portion 
is mounted on the upper car 71, and a lower-car output portion 82 
serving as an output portion is mounted on the lower car 72. The 
upper-car speed sensor 73, the upper-car position sensor 75, and 
the lower-car position sensor 76 are electrically connected to the 
upper-car output portion 81. The lower-car speed sensor 74, the 
lower-car position sensor 76, and the upper-car position sensor 
75 are electrically connected to the lower-car output portion 82. 

The upper-car output portion 81 is electrically connected to 



the upper-car safety devices 77 through an upper-car emergency stop 
wiring 83 serving as transmission means installed on the upper car 

71. Further, the upper-car output portion 81 predicts, on the basis 
of information (hereinafter referred to as ^'upper-car detection 
information" in this embodiment) from the upper-car speed sensor 

73, the upper-car position sensor 75, and the lower-car position 
sensor 7 6, whether or not the upper car 71 will collide against 
the lower car 72, and outputs an actuation signal to the upper-car 
safety devices 77 upon predicting that a collision will occur. 
Further, when input with the upper-car detection information, the 
upper-car output portion 81 predicts whether or not the upper car 
71 will collide against the lower car 72 on the assumption that 
the lower car 72 is running toward the upper car 71 at its maximum 
normal operation speed. 

The lower-car output portion 82 is electrically connected to 
the lower-car safety devices 78 through a lower-car emergency stop 
wiring 84 serving as transmission means installed on the lower car 

72. Further, the lower-car output portion 82 predicts, on the basis 
of information (hereinafter referred to as ''lower-car detection 
information" in this embodiment) from the lower-car speed sensor 

74, the lower-car position sensor 76, and the upper-car position 
sensor 75, whether or not the lower car 72 will collide against 
the upper car 71, and outputs an actuation signal to the lower-car 
safety devices 78 upon predicting that a collision will occur. 
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Further, when input with the lower-car detection information, the 
lower-car output portion 82 predicts whether or not the lower car 
72 will collide against the upper car 71 on the assumption that 
the upper car 71 is running toward the lower car 72 at its maximum 
normal operation speed. 

Normally, the operations of the upper car 71 and the lower 
car 72 are controlled such that they are sufficiently spaced away 
from each other so that the upper-car safety devices 77 and the 
lower-car safety devices 78 do not actuate. Otherwise, this 
embodiment is of the same construction as Embodiment 6. 

Next, operation is described. For instance, when, due to a 
break in the first main rope suspending the upper car 71, the upper 
car 71 falls toward the lower car 72, the upper-car output portion 

81 and the lower-car output portion 82 both predict the impending 
collision between the upper car 71 and the lower car 72 . As a result, 
the upper-car output portion 81 and the lower-car output portion 

82 each output an actuation signal to the upper-car safety devices 
77 and the lower-car safety devices 78, respectively. This actuates 
the upper-car safety devices 77 and the lower-car safety devices 
78, thus braking the upper car 71 and the lower car 72. 

In addition to providing the same effects as those of Embodiment 
6, the above-described elevator apparatus, in which the upper-car 
speed sensor 73 is electrically connected to only the upper-car 
output portion 81 and the lower-car speed sensor 74 is electrically 



connected to only the lower-car output portion 82, obviates the 
need to provide electrical wiring between the upper-car speed sensor 
73 and the lower-car output portion 82 and between the lower-car 
speed sensor 7 4 and the upper-car output portion 8 1 , making it possible 
to simplify the electrical wiring installation. 

Embodiment 8 

Fig. 14 is a schematic diagram showing an elevator apparatus 
according to Embodiment 8 of the present invention. Referring to 
Fig. 14, mounted to the upper car 71 and the lower car 72 is an 
inter-car distance sensor 91 serving as inter-car distance detecting 
means for detecting the distance between the upper car 71 and the 
lower car 72. The inter-car distance sensor 91 includes a laser 
irradiation portion mounted on the upper car 71 and a reflection 
portion mounted on the lower car 72. The distance between the upper 
car 71 and the lower car 72 is obtained by the inter-car distance 
sensor 91 based on the reciprocation time of laser light between 
the laser irradiation portion and the reflection portion. 

The upper-car speed sensor 73, the lower-car speed sensor 74, 
the upper-car position sensor 75, and the inter-car distance sensor 
91 are electrically connected to the upper-car output portion 81. 
The upper-car speed sensor 73, the lower-car speed sensor 74, the 
lower-car position sensor 7 6, and the inter-car distance sensor 
91 are electrically connected to the lower-car output portion 82. 
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The upper-car output portion 81 predicts, on the basis of 
information (hereinafter referred to as ^'upper-car detection 
information" in this embodiment) from the upper-car speed sensor 
73, the lower-car speed sensor 74, the upper-car position sensor 

75, and the inter-car distance sensor 91, whether or not the upper 
car 71 will collide against the lower car 72, and outputs an actuation 
signal to the upper-car safety devices 77 upon predicting that a 
collision will occur. 

The lower-car output portion 82 predicts, on the basis of 
information (hereinafter referred to as ^'lower-car detection 
information" in this embodiment) from the upper-car speed sensor 
73, the lower-car speed sensor 74, the lower-car position sensor 

76, and the inter-car distance sensor 91, whether or not the lower 
car 72 will collide against the upper car 71, and outputs an actuation 
signal to the lower-car safety device 78 upon predicting that a 
collision will occur. Otherwise, this embodiment is of the same 
construction as Embodiment 7. 

In the elevator apparatus as described above, the output 
portion 79 predicts whether or not a collision will occur between 
the upper car 71 and the lower car 72 based on the information from 
the inter-car distance sensor 91, making it possible to predict 
with improved reliability whether or not a collision will occur 
between the upper car 71 and the lower car 72. 

It should be noted that the door closed sensor 58 of Embodiment 
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3 may be applied to the elevator apparatus as described in Embodiments 
6 through 8 so that the output portion is input with the open/closed 
detection signal. It is also possible to apply the break detection 
lead wire 61 of Embodiment 4 here as well so that the output portion 
is input with the rope break signal. 

While the drive portion in Embodiments 2 through 8 described 
above is driven by utilizing the electromagnetic repulsion force 
or the electromagnetic attraction force between the first 
electromagnetic portion 4 9 and the second electromagnetic portion 
50, the drive portion may be driven by utilizing, for example, an 
eddy current generated in a conductive repulsion plate. In this 
case, as shown in Fig. 15, a pulsed current is supplied as an actuation 
signal to the electromagnet 48 , and the movable portion 4 0 is displaced 
through the interaction between an eddy current generated in a 
repulsion plate 51 fixed to the movable portion 40 and the magnetic 
field from the electromagnet 48. 

While in Embodiments 2 through 8 described above the car speed 
detecting means is provided in the hoistway 1, it may also be mounted 
on the car. In this case, the speed detection signal from the car 
speed detecting means is transmitted to the output portion through 
the control cable. 

Embodiment 9 

Fig. 16 is a plan view showing a safety device according to 
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Embodiment 9 of the present invention. Here, a safety device 155 
has the wedge 34, an actuator portion 156 connected to a lower portion 
of the wedge 34, and the guide portion 3 6 arranged above the wedge 
34 and fixed to the car 3. The actuator portion 156 is vertically 
movable with respect to the guide portion 36 together with the wedge 
34. 

The. actuator portion 156 has a pair of contact portions 157 
capable of moving into and away from contact with the car guide 
rail 2, a pair of link members 158a, 158b each connected to one 
of the contact portions 157 , an actuating mechanism 159 for displacing 
the link member 158a relative to the other link member 158b such 
that the respective contact portions 157 move into and away from 
contact with the car guide rail 2, and a support portion 160 supporting 
the contact portions 157, the link members 158a, 158b, and the 
actuating mechanism 159. A horizontal shaft 170, which passes 
through the wedge 34, is fixed to the support portion 160. The wedge 
34 is capable of reciprocating displacement in the horizontal 
direction with respect to the horizontal shaft 170. 

The linkmembers 158a, 158b cross each other at a portionbetween 
one end to the other end portion thereof. Further, provided to the 
support portion 160 is a connection member 161 which pivotably 
connects the link member 158a, 158b together at the portion where 
the link members 158a, 158b cross each other. Further, the link 
member 158a is provided so as to be pivotable with respect to the 
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other link member 158b about the connection member 161. 

As the respective other end portions of the link member 158a, 
158b are displaced so as to approach each other, each contact portion 
157 is displaced into contact with the car guide rail 2. Likewise, 
as the respective other end portions of the link member 158a, 158b 
are displaced so as to separate away from each other, each contact 
portion 157 is displaced away from the car guide rail 2. 

The actuating mechanism 159 is arranged between the respective 
other end portions of the link members 158a, 158b. Further, the 
actuating mechanism 159 is supported by each of the link members 
158a, 158b. Further, the actuatingmechanism 159 includes a rod-like 
movable portion 162 connected to the link member 158a, and a drive 
portion 163 fixed to the other linkmember 158b and adapted to displace 
the movable portion 162 in a reciprocating manner. The actuating 
mechanism 159 is pivotable about the connection member 161 together 
with the link members 158a, 158b. 

The movable portion 162 has a movable iron core 164 accommodated 
within the drive portion 163, and a connecting rod 165 connecting 
the movable iron core 164 and the link member 158b to each other. 
Further, the movable portion 162 is capable of reciprocating 
displacement between a contact position where the contact portions 
157 come into contact with the car guide rail 2 and a separated 
position where the contact portions 157 are separated away from 
contact with the car guide rail 2 . 



The drive portion 163 has a stationary iron core 166 including 
a pair of regulating portions 166a and 166b regulating the 
displacement of the movable iron core 164 and a side wall portion 
166c that connects the regulating members 166a, 166b to each other 
and, surrounding the movable iron core 164, a first coil 167 which 
is accommodated within the stationary iron core 166 and which, when 
supplied with electric current, causes the movable iron core 164 
to be displaced into contact with the regulating portion 166a, a 
second coil 168 which is accommodated within the stationary iron 
core 166 and which, when supplied with electric current, causes 
the movable iron core 164 to be displaced into contact with the 
other regulating portion 166b, and an annular permanent magnet 169 
arranged between the first coil 167 and the second coil 168. 

The regulating member 166a is so arranged that the movable 
iron core 164 abuts on the regulating member 166a when the movable 
portion 162 is at the separated position. Further, the other 
regulating member 166b is so arranged that the movable iron core 
164 abuts on the regulating member 166b when the movable portion 
162 is at the contact position. 

The first coil 167 and the second coil 168 are annular 
electromagnets that surround the movable portion 162 . Further, the 
first coil 167 is arranged between the permanent magnet 169 and 
the regulating portion 166a, and the second coil 168 is arranged 
between the permanent magnet 169 and the other regulating portion 
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166b. 

With the movable iron core 164 abutting on the regulating 
portion 166a, a space serving as a magnetic resistance exists between 
the movable iron core 164 and the other regulating member 166b, 
with the result that the amount of magnetic flux generated by the 
permanent magnet 169 becomes larger on the first coil 167 side than 
on the second coil 168 side. Thus, the movable iron core 164 is 
retained in position while still abutting on the regulating member 
166a. 

Further, with the movable iron core 164 abutting on the other 
regulating portion 166b, a space serving as a magnetic resistance 
exists between the movable iron core 164 and the regulating member 
166a, with the result that the amount of magnetic flux generated 
by the permanent magnet 169 becomes larger on the second coil 168 
side than on the first coil 167 side. Thus, the movable iron core 
164 is retained in position while still abutting on the other 
regulating member 166b. 

Electric power serving as an actuation signal from the output 
portion 32 can be input to the second coil 168. When input with 
the actuation signal, the second coil 168 generates a magnetic flux 
acting against the force that keeps the movable iron core 164 in 
abutment with the regulating portion 166a. Further, electric power 
serving as a recovery signal from the output portion 32 can be input 
to the first coil 167. When input with the recovery signal, the 
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first coil 167 generates a magnetic flux acting against the force 
that keeps the movable iron core 164 in abutment with the other 
regulating portion 166b. 

Otherwise, this embodiment is of the same construction as 
Embodiment 2 . 

Next, operation is described. During normal operation, the 
movable portion 162 is located at the separated position, with the 
movable iron core 164 being held in abutment on the regulating portion 
166a by the holding force of the permanent magnet 169. With the 
movable iron core 164 abutting on the regulating portion 166a, the 
wedge 34 is maintained at a spacing from the guide portion 36 and 
separated away from the car guide rail 2. 

Thereafter, as in Embodiment 2, by outputting an actuation 
signal to each safety device 155 from the output portion 32, electric 
current is supplied to the second coil 168 . This generates a magnetic 
flux around the second coil 168, which causes the movable iron core 
164 to be displaced toward the other regulating portion 166b, that 
is, from the separated position to the contact position. As this 
happens, the contact portions 157 are displaced so as to approach 
each other, coming into contact with the car guide rail 2. Braking 
is thus applied to the wedge 34 and the actuator portion 155. 

Thereafter, the guide portion 36 continues its descent, thus 
approaching the wedge 34 and the actuator portion 155. As a result, 
the wedge 34 is guided along the inclined surface 44, causing the 
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car guide rail 2 to be held between the wedge 34 and the contact 
surface 45. Thereafter, the car 3 is braked through operations 
identical to those of Embodiment 2. 

During the recovery phase, a recovery signal is transmitted 
from the output portion 32 to the first coil 167. As a result, a 
magnetic flux is generated around the first coil 167, causing the 
movable iron core 164 to be displaced from the contact position 
to the separated position. Thereafter, the press contact of the 
wedge 34 and the contact surface 45 with the car guide rail 2 is 
released in the same manner as in Embodiment 2. 

In the elevator apparatus as described above, the actuating 
mechanism 159 causes the pair of contact portions 157 to be displaced 
through the intermediation of the link members 158a, 158b, whereby, 
in addition to the same effects as those of Embodiment 2, it is 
possible to reduce the number of actuating mechanisms 159 required 
for displacing the pair of contact portions 157. 

Embodiment 10 

Fig . 17 is a partially cutaway side view showing a safety device 
according to Embodiment 10 of the present invention. Referring to 
Fig. 17, a safety device 175 has the wedge 34, an actuator portion 
176 connected to a lower portion of the wedge 34, and the guide 
portion 36 arranged above the wedge 34 and fixed to the car 3. 

The actuator portion 176 has the actuating mechanism 159 
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constructed in the same manner as that of Embodiment 9, and a link 
member 177 displaceable through displacement of the movable portion 
162 of the actuating mechanism 159. 

The actuating mechanism 159 is fixed to a lower portion of 
the car 3 so as to allow reciprocating displacement of the movable 
portion 162 in the horizontal direction with respect to the car 
3. The link member 177 is pivotably provided to a stationary shaft 
180 fixed to a lower portion of the car 3. The stationary shaft 
180 is arranged below the actuating mechanism 159. 

The link member 177 has a first link portion 178 and a second 
link portion 179 which extend in different directions from the 
stationary shaft 180 taken as the start point. The overall 
configuration of the link member 177 is substantially a prone shape. 
That is, the second link portion 179 is fixed to the first link 
portion 178, and the first link portion 178 and the second link 
portion 179 are integrally pivotable about the stationary shaft 
180. 

The length of the first link portion 178 is larger than that 
of the second link portion 179. Further, an elongate hole 182 is 
provided at the distal end portion of the first link portion 178. 
A slide pin 183, which is slidably passed through the elongate hole 
182, is fixed to a lower portion of the wedge 34. That is, the wedge 
34 is slidably connected to the distal end portion of the first 
link portion 178. The distal end portion of the movable portion 



162 is pivotably connected to the distal end portion of the second 
link portion 17 9 through the intermediation of a connecting pin 
181. 

The link member 177 is capable of reciprocating movement 
between a separated position where it keeps the wedge 34 separated 
away from and below the guide portion 36 and an actuating position 
where it causes the wedge 34 to wedge in between the car guide rail 
and the guide portion 36. The movable portion 162 is projected from 
the drive portion 163 when the link member 177 is at the separated 
position, and it is retracted into the drive portion 163 when the 
link member is at the actuating position. 

Next, operation is described. During normal operation, the 
link member 177 is located at the separated position due to the 
retracting motion of the movable portion 162 into the drive portion 
163. At this time, the wedge 34 is maintained at a spacing from 
the guide portion 36 and separated away from the car guide rail. 

Thereafter, in the same manner as in Embodiment 2, an actuation 
signal is output from the output portion 32 to each safety device 
175, causing the movable portion 162 to advance. As a result, the 
link member 177 is pivoted about the stationary shaft 180 for 
displacement into the actuating position. This causes the wedge 
34 to come into contact with the guide portion 36 and the car guide 
rail, wedging in between the guide portion 36 and the car guide 
rail. Braking is thus applied to the car 3. 



During the recovery phase, a recovery signal is transmitted 
from the output portion 32 to each safety device 175, causing the 
movable portion 162 to be urged in the retracting direction. The 
car 3 is raised in this state, thus releasing the wedging of the 
wedge 34 in between the guide portion 36 and the car guide rail. 

The above-described elevator apparatus also provides the same 
effects as those of Embodiment 2. 

Embodiment 11 

Fig. 18 is a schematic diagram showing an elevator apparatus 
according to Embodiment 11 of the present invention. In Fig 18, 
a hoisting machine 101 serving as a driving device and a control 
panel 102 are provided in an upper portion within the hoistway 1. 
The control panel 102 is electrically connected to the hoisting 
machine 101 and controls the operation of the elevator . The hoisting 
machine 101 has a driving device main body 103 including a motor 
and a driving sheave 104 rotated by the driving device main body 
103. A plurality of main ropes 4 are wrapped around the sheave 104. 
The hoisting machine 101 further includes a deflector sheave 105 
around which each main rope 4 is wrapped, and a hoisting machine 
braking device (deceleration braking device) 106 for braking the 
rotation of the drive sheave 104 to decelerate the car 3. The car 
3 and a counter weight 107 are suspended in the hoistway 1 by means 
of the main ropes 4. The car 3 and the counterweight 107 are raised 



and lowered in the hoistway 1 by driving the hoisting machine 101. 

The safety device 33, the hoisting machine braking device 106, 
and the control panel 102 are electrically connected to a monitor 
device 108 that constantly monitors the state of the elevator. A 
car position sensor 109, a car speed sensor 110, and a car acceleration 
sensor 111 are also electrically connected to the monitor device 
108. The car position sensor 109, the car speed sensor 110, and 
the car acceleration sensor 111 respectively serve as a car position 
detecting portion for detecting the speed of the car 3, a car speed 
detecting portion for detecting the speed of the car 3, and a car 
acceleration detecting portion for detecting the acceleration of 
the car 3. The car position sensor 109, the car speed sensor 110, 
and the car acceleration sensor 111 are provided in the hoistway 
1. 

Detection means 112 for detecting the state of the elevator 
includes the car position sensor 109, the car speed sensor 110, 
and the car acceleration sensor 111. Any of the following may be 
used for the car position sensor 109: an encoder that detects the 
position of the car 3 by measuring the amount of rotation of a rotary 
member that rotates as the car 3 moves; a linear encoder that detects 
the position of the car 3 by measuring the amount of linear 
displacement of the car 3; an optical displacement measuring device 
which includes, for example, a projector and a photodetector provided 
in the hoistway 1 and a reflection plate provided in the car 3, 



and which detects the position of the car 3 by measuring how long 
it takes for light projected from the projector to reach the 
photodetector . 

The monitor device 108 includes a memory portion 113 and an 
output portion (calculation portion) 114. The memory portion 113 
stores in advance a variety of (in this embodiment, two) abnormality 
determination criteria (set data) serving as criteria for judging 
whether or not there is an abnormality in the elevator. The output 
portion 114 detects whether or not there is an abnormality in the 
elevator based on information from the detection means 112 and the 
memory portion 113. The two kinds of abnormality determination 
criteria stored in the memory portion 113 in this embodiment are 
car speed abnormality determination criteria relating to the speed 
of the car 3 and car acceleration abnormality determination criteria 
relating to the acceleration of the car 3. 

Fig. 19 is a graph showing the car speed abnormality 
determination criteria stored in the memory portion 113 of Fig. 
18. In Fig. 19, an ascending/descending section of the car 3 in 
the hoistway 1 (a section between one terminal floor and an other 
terminal floor) includes acceleration/deceleration sections and 
a constant speed section located between the 
acceleration/deceleration sections. The car 3 

accelerates/decelerates in the acceleration/deceleration sections 
respectively located in the vicinity of the one terminal floor and 



the other terminal floor. The car 3 travels at a constant speed 
in the constant speed section. 

The car speed abnormality determination criteria has three 
detection patterns each associated with the position of the car 
3. That is, a normal speed detection pattern (normal level) 115 
that is the speed of the car 3 during normal operation, a first 
abnormal speed detection pattern (first abnormal level) 116 having 
a larger value than the normal speed detection pattern 115, and 
a second abnormal speed detection pattern (second abnormal level) 
117 having a larger value than the first abnormal speed detection 
pattern 116 are set, each in association with the position of the 
car 3 . 

The normal speed detection pattern 115, the first abnormal 
speed detection pattern 116, and a second abnormal speed detection 
pattern 117 are set so as to have a constant value in the constant 
speed section, and to have a value continuously becoming smaller 
toward the terminal floor in each of the acceleration and deceleration 
sections. The difference in value between the first abnormal speed 
detection pattern 116 and the normal speed detection pattern 115, 
and the difference in value between the second abnormal speed 
detection pattern 117 and the first abnormal speed detection pattern 
116, are set to be substantially constant at all locations in the 
ascending/descending section . 

Fig. 20 is a graph showing the car acceleration abnormality 



determination criteria stored in the memory portion 113 of Fig. 
18. In Fig. 20, the car acceleration abnormality determination 
criteria has three detection patterns each associated with the 
position of the car 3. That is, a normal acceleration detection 
pattern (normal level) 118 that is the acceleration of the car 3 
during normal operation, a first abnormal acceleration detection 
pattern (first abnormal level) 119 having a larger value than the 
normal acceleration detection pattern 118, and a second abnormal 
acceleration detection pattern (second abnormal level) 120 having 
a larger value than the first abnormal acceleration detection pattern 
119 are set, each in association with the position of the car 3. 

The normal acceleration detection pattern 118, the first 
abnormal acceleration detection pattern 119, and the second abnormal 
acceleration detection pattern 120 are each set so as to have a 
value of zero in the constant speed section, a positive value in 
one of the acceleration/deceleration section, and a negative value 
in the other acceleration/deceleration section. The difference in 
value between the first abnormal acceleration detection pattern 
119 and the normal acceleration detection pattern 118, and the 
difference in value between the second abnormal acceleration 
detection pattern 120 and the first abnormal acceleration detection 
pattern 119, are set to be substantially constant at all locations 
in the ascending/descending section. 

That is, the memory portion 113 stores the normal speed 



detection pattern 115, the first abnormal speed detection pattern 
116, and the second abnormal speed dete.ction pattern 117 as the 
car speed abnormality determination criteria, and stores the normal 
acceleration detection pattern 118, the first abnormal acceleration 
detection pattern 119, and the second abnormal acceleration 
detection pattern 120 as the car acceleration abnormality 
determination criteria . 

The safety device 33, the control panel 102, the hoisting 
machine braking device 106, the detection means 112, and the memory 
portion 113 are electrically connected to the output portion 114. 
Further, a position detection signal, a speed detection signal, 
and an acceleration detection signal are input to the output portion 
114 continuously over time from the car position sensor 109, the 
car speed sensor 110, and the car acceleration sensor 111 . The output 
portion 114 calculates the position of the car 3 based on the input 
position detection signal. The output portion 114 also calculates 
the speed of the car 3 and the acceleration of the car 3 based on 
the input speed detection signal and the input acceleration detection 
signal, respectively, as a variety of (in this example, two) 
abnormality determination factors. 

The output portion 114 outputs an actuation signal (trigger 
signal) to the hoisting machine braking device 106 when the speed 
of the car 3 exceeds the first abnormal speed detection pattern 
116, or when the acceleration of the car 3 exceeds the first abnormal 
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acceleration detection pattern 119. At the same time, the output 
portion 114 outputs a stop signal to the control panel 102 to stop 
the drive of the hoisting machine 101. When the speed of the car 
3 exceeds the second abnormal speed detection pattern 117, or when 
the acceleration of the car 3 exceeds the second abnormal acceleration 
detection pattern 120, the output portion 114 outputs an actuation 
signal to the hoisting machine braking device 106 and the safety 
device 33. That is, the output portion 114 determines to which 
braking means it should output the actuation signals according to 
the degree of the abnormality in the speed and the acceleration 
of the car 3. 

Otherwise, this embodiment is of the same construction as 
Embodiment 2 . 

Next, operation is described. When the position detection 
signal, the speed detection signal, and the acceleration detection 
signal are input to the output portion 114 from the car position 
sensor 109, the car speed sensor 110, and the car acceleration sensor 
111, respectively, the output portion 114 calculates the position, 
the speed, and the acceleration of the car 3 based on the respective 
detection signals thus input. After that, the output portion 114 
compares the car speed abnormality determination criteria and the 
car acceleration abnormality determination criteria obtained from 
the memory portion 113 with the speed and the acceleration of the 
car 3 calculated based on the respective detection signals input. 



Through this comparison, the output portion 114 detects whether 
or not there is an abnormality in either the speed or the acceleration 
of the car 3. 

During normal operation, the speed of the car 3 has 
approximately the same value as the normal speed detection pattern, 
and the acceleration of the car 3 has approximately the same value 
as the normal acceleration detection pattern. Thus, the output 
portion 114 detects that there is no abnormality in either the speed 
or the acceleration of the car 3, and normal operation of the elevator 
continues . 

When, for example, the speed of the car 3 abnormally increases 
and exceeds the first abnormal speed detection pattern 116 due to 
some cause, the output portion 114 detects that there is an abnormality 
in the speed of the car 3. Then, the output portion 114 outputs 
an actuation signal and a stop signal to the hoisting machine braking 
device 106 and the control panel 102, respectively. As a result, 
the hoisting machine 101 is stopped, and the hoisting machine braking 
device 106 is operated to brake the rotation of the drive sheave 
104. 

When the acceleration of the car 3 abnormally increases and 
exceeds the first abnormal acceleration set value 119, the output 
portion 114 outputs an actuation signal and a stop signal to the 
hoisting machine braking device 106 and the control panel 102, 
respectively, thereby braking the rotation of the drive sheave 104. 



If the speed of the car 3 continues to increase after the 
actuation of the hoisting machine braking device 10 6 and exceeds 
the second abnormal speed set value 117, the output portion 114 
outputs an actuation signal to the safety device 33 while still 
outputting the actuation signal to the hoisting machine braking 
device 106. Thus, the safety device 33 is actuated and the car 3 
is braked through the same operation as that of Embodiment 2. 

Further, when the acceleration of the car 3 continues to 
increase after the actuation of the hoisting machine braking device 
106, and exceeds the second abnormal acceleration set value 120, 
the output portion 114 outputs an actuation signal to the safety 
device 33 while still outputting the actuation signal to the hoisting 
machine braking device 106. Thus, the safety device 33 is actuated. 

With such an elevator apparatus, the monitor device 108 obtains 
the speed of the car 3 and the acceleration of the car 3 based on 
the information from the detection means 112 for detecting the state 
of the elevator. When the monitor device 108 judges that there is 
an abnormality in the obtained speed of the car 3 or the obtained 
acceleration of the car 3, the monitor device 108 outputs an actuation 
signal to at least one of the hoisting machine braking device 106 
and the safety device 33 . That is, judgment of the presence or absence 
of an abnormality is made by the monitor device 108 separately for 
a variety of abnormality determination factors such as the speed 
of the car and the acceleration of the car. Accordingly, an 



abnormality in the elevator can be detected earlier andmore reliably. 
Therefore, it takes a shorter time for the braking force on the 
car 3 to be generated after occurrence of an abnormality in the 
elevator. 

Further, the monitor device 108 includes the memory portion 
113 that stores the car speed abnormality determination criteria 
used for judging whether or not there is an abnormality in the speed 
of the car 3, and the car acceleration abnormality determination 
criteria used for judging whether or not there is an abnormality 
in the acceleration of the car 3. Therefore, it is easy to change 
the judgment criteria used for judging whether or not there is an 
abnormality in the speed and the acceleration of the car 3, 
respectively, allowing easy adaptation to design changes or the 
like of the elevator. 

Further, the following patterns are set for the car speed 
abnormality determination criteria: the normal speed detection 
pattern 115, the first abnormal speed detection pattern 116 having 
a larger value than the normal speed detection pattern 115, and 
the second abnormal speed detection pattern 117 having a larger 
value than the first abnormal speed detection pattern 116. When 
the speed of the car 3 exceeds the first abnormal speed detection 
pattern 116, the monitor device 108 outputs an actuation signal 
to the hoisting machine braking device 106, and when the speed of 
the car 3 exceeds the second abnormal speed detection pattern 117, 



the monitor device 108 outputs an actuation signal to the hoisting 
machine braking device 106 and the safety device 33. Therefore, 
the car 3 can be braked stepwise according to the degree of this 
abnormality in the speed of the car 3. As a result, the frequency 
of large shocks exerted on the car 3 can be reduced, and the car 
3 can be more reliably stopped. 

Further, the following patterns are set for the car 
acceleration abnormality determination criteria: the normal 
acceleration detection pattern 118, the first abnormal acceleration 
detection pattern 119 having a larger value than the normal 
acceleration detection pattern 118, and the second abnormal 
acceleration detection pattern 120 having a larger value than the 
first abnormal acceleration detection pattern 119. When the 
acceleration of the car 3 exceeds the first abnormal acceleration 
detection pattern 119, the monitor device 108 outputs an actuation 
signal to the hoisting machine braking device 106, and when the 
acceleration of the car 3 exceeds the second abnormal acceleration 
detection pattern 120, the monitor device 108 outputs an actuation 
signal to the hoisting machine braking device 106 and the safety 
device 33. Therefore, the car 3 can be braked stepwise according 
to the degree of an abnormality in the acceleration of the car 3. 
Normally, an abnormality occurs in the acceleration of the car 3 
before an abnormality occurs in the speed of the car 3. As a result, 
the frequency of large shocks exerted on the car 3 can be reduced, 
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and the car 3 can be more reliably stopped . 

Further, the normal speed detection pattern 115, the first 
abnormal speed detection pattern 116, and the second abnormal speed 
detection pattern 117 are each set in association with the position 
of the car 3 . Therefore, the first abnormal speed detection pattern 
116 and the second abnormal speed detection pattern 117 each can 
be set in association with the normal speed detection pattern 115 
at all locations in the ascending/descending section of the car 
3. In the acceleration/deceleration sections, in particular, the 
first abnormal speed detection pattern 116 and the second abnormal 
speed detection pattern 117 each can be set to a relatively small 
value because the normal speed detection pattern 115 has a small 
value. As a result, the impact acting on the car 3 upon braking 
can be mitigated. 

It should be noted that in the above-described example, the 
car speed sensor 110 is used when the monitor 108 obtains the speed 
of the car 3. However, instead of using the car speed sensor 110, 
the speed of the car 3 may be obtained from the position of the 
car 3 detected by the car position sensor 109. That is, the speed 
of the car 3 may be obtained by differentiating the position of 
the car 3 calculated by using the position detection signal from 
the car position sensor 109. 

Further, in the above-described example, the car acceleration 
sensor 111 is used when the monitor 108 obtains the acceleration 



of the car 3. However, instead of using the car acceleration sensor 
111, the acceleration of the car 3 may be obtained from the position 
of the car 3 detected by the car position sensor 109. That is, the 
acceleration of the car 3 may be obtained by differentiating, twice, 
the position of the car 3 calculated by using the position detection 
signal from the car position sensor 109. 

Further, in the above-described example, the output portion 
114 determines to which braking means it should output the actuation 
signals according to the degree of the abnormality in the speed 
and acceleration of the car 3 constituting the abnormality 
determination factors. However, the braking means to which the 
actuation signals are to be output may be determined in advance 
for each abnormality determination factor. 

Embodiment 12 

Fig. 21 is a schematic diagram showing an elevator apparatus 
according to Embodiment 12 of the present invention. In Fig. 21, 
a plurality of hall call buttons 125 are provided in the hall of 
each floor . A plurality of destination floor buttons 12 6 are provided 
in the car 3. A monitor device 127 has the output portion 114. An 
abnormality determination criteria generating device 128 for 
generating a car speed abnormality determination criteria and a 
car acceleration abnormality determination criteria is electrically 
connected to the output portion 114 . The abnormality determination 
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criteria generating device 128 is electrically connected to each 
hall call button 125 and each destination floor button 126. A 
position detection signal is input to the abnormality determination 
criteria generating device 128 from the car position sensor 109 
via the output portion 114. 

The abnormality determination criteria generating device 128 
includes a memory portion 129 and a generation portion 130. The 
memory portion 129 stores a plurality of car speed abnormality 
determination criteria and a plurality of car acceleration 
abnormality determination criteria, which serve as abnormal judgment 
criteria for all the cases where the car 3 ascends and descends 
between the floors. The generation portion 130 selects a car speed 
abnormality determination criteria and a car acceleration 
abnormality determination criteria one by one from the memory portion 
129, and outputs the car speed abnormality determination criteria 
and the car acceleration abnormality determination criteria to the 
output portion 114. 

Each car speed abnormality determination criteria has three 
detection patterns each associated with the position of the car 
3, which are similar to those of Fig. 19 of Embodiment 11. Further, 
each car acceleration abnormality determination criteria has three 
detection patterns each associated with the position of the car 
3, which are similar to those of Fig. 20 of Embodiment 11. 

The generation portion 130 calculates a detection position 



of the car 3 based on information from the car position sensor 109, 
and calculates a target floor of the car 3 based on information 
from at least one of the hall call buttons 125 and the destination 
floor buttons 126. The generation portion 130 selects one by one 
a car speed abnormality determination criteria and a car acceleration 
abnormality determination criteria used for a case where the 
calculated detection position and the target floor are one and the 
other of the terminal floors. 

Otherwise, this embodiment is of the same construction as 
Embodiment 1 1 . 

Next, operation is described. A position detection signal 
is constantly input to the generation portion 130 from the car position 
sensor 109 via the output portion 114. When a passenger or the like 
selects any one of the hall call buttons 125 or the destination 
floor buttons 126 and a call signal is input to the generation portion 
130 from the selected button, the generation portion 130 calculates 
a detection position and a target floor of the car 3 based on the 
input position detection signal and the input call signal, and selects 
one out of both a car speed abnormality determination criteria and 
a car acceleration abnormality determination criteria . After that, 
the generation portion 130 outputs the selected car speed abnormality 
determination criteria and the selected car acceleration abnormality 
determination criteria to the output portion 114. 

The output portion 114 detects whether or not there is an 
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abnormality in the speed and the acceleration of the car 3 in the 
same way as in Embodiment 11. Thereafter, this embodiment is of 
the same operation as Embodiment 9. 

With such an elevator apparatus, the car speed abnormality 
determination criteria and the car acceleration abnormality 
determination criteria are generated based on the information from 
at least one of the hall call buttons 125 and the destination floor 
buttons 126. Therefore, it is possible to generate the car speed 
abnormality determination criteria and the car acceleration 
abnormality determination criteria corresponding to the target floor . 
As a result, the time it takes for the braking force on the car 
3 to be generated after occurrence of an abnormality in the elevator 
can be reduced even when a different target floor is selected. 

It should be noted that in the above-described example, the 
generation portion 130 selects one out of both the car speed 
abnormality determination criteria and car acceleration abnormality 
determination criteria from among a plurality of car speed 
abnormality determination criteria and a plurality of car 
acceleration abnormality determination criteria stored in the memory 
portion 129 . However, the generation portion may directly generate 
an abnormal speed detection pattern and an abnormal acceleration 
detection pattern based on the normal speed pattern and the normal 
acceleration pattern of the car 3 generated by the control panel 
102. 
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Embodiment 13 

Fig. 22 is a schematic diagram showing an elevator apparatus 
according to Embodiment 13 of the present invention . In this example , 
each of the main ropes 4 is connected to an upper portion of the 
car 3 via a rope fastening device 131 (Fig. 23) . The monitor device 
108 is mounted on an upper portion of the car 3. The car position 
sensor 109, the car speed sensor 110, and a plurality of rope sensors 
132 are electrically connected to the output portion 114. Rope 
sensors 132 are provided in the rope fastening device 131, and each 
serve as a rope break detecting portion for detecting whether or 
not a break has occurred in each of the ropes 4 . The detection means 
112 includes the car position sensor 109, the car speed sensor 110, 
and the rope sensors 132. 

The rope sensors 132 each output a rope brake detection signal 
to the output portion 114 when the main ropes 4 break. The memory 
portion 113 stores the car speed abnormality determination criteria 
similar to that of Embodiment 11 shown in Fig. 19, and a rope 
abnormality determination criteria used as a reference for judging 
whether or not there is an abnormality in the main ropes 4. 

A first abnormal level indicating a state where at least one 
of the main ropes 4 have broken, and a second abnormal level indicating 
a state where all of the main ropes 4 has broken are set for the 
rope abnormality determination criteria. 



The output portion 114 calculates the position of the car 3 
based on the input position detection signal. The output portion 
114 also calculates the speed of the car 3 and the state of the 
main ropes 4 based on the input speed detection signal and the input 
rope brake signal, respectively, as a variety of (in this example, 
two) abnormality determination factors. 

The output portion 114 outputs an actuation signal (trigger 
signal) to the hoisting machine braking device 106 when the speed 
of the car 3 exceeds the first abnormal speed detection pattern 
116 (Fig. 19), or when at least one of the main ropes 4 breaks. 
When the speed of the car 3 exceeds the second abnormal speed detection 
pattern 117 (Fig. 19), or when all of the main ropes 4 break, the 
output portion 114 outputs an actuation signal to the hoisting machine 
braking device 106 and the safety device 33. That is, the output 
portion 114 determines to which braking means it should output the 
actuation signals according to the degree of an abnormality in the 
speed of the car 3 and the state of the main ropes 4. 

Fig. 23 is a diagram showing the rope fastening device 131 
and the rope sensors 132 of Fig. 22. Fig. 24 is a diagram showing 
a state where one of the main ropes 4 of Fig. 23 has broken. In 
Figs. 23 and 24, the rope fastening device 131 includes a plurality 
of rope connection portions 134 for connecting the main ropes 4 
to the car 3 . The rope connection portions 134 each include an spring 
133 provided between the main rope 4 and the car 3. The position 
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of the car 3 is displaceable with respect to the main ropes 4 by 
the expansion and contraction of the springs 133. 

The rope sensors 132 are each provided to the rope connection 
portion 134. The rope sensors 132 each serve as a displacement 
measuring device for measuring the amount of expansion of the spring 
133. Each rope sensor 132 constantly outputs a measurement signal 
corresponding to the amount of expansion of the spring 133 to the 
output portion 114 . Ameasurement signal obtained when the expansion 
of the spring 133 returning to its original state has reached a 
predetermined amount is input to the output portion 114 as a break 
detection signal . It should be noted that each of the rope connection 
portions 134 may be provided with a scale device that directly measures 
the tension of the main ropes 4 . 

Otherwise, this embodiment is of the same construction as 
Embodiment 11. 

Next, operation is described. When the position detection 
signal, the speed detection signal, and the break detection signal 
are input to the output portion 114 from the car position sensor 
109, the car speed sensor 110, and each rope sensor 131, respectively, 
the output portion 114 calculates the position of the car 3, the 
speed of the car 3, and the number of main ropes 4 that have broken 
based on the respective detection signals thus input. After that, 
the output portion 114 compares the car speed abnormality 
determination criteria and the rope abnormality determination 
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criteria obtained from the memory portion 113 with the speed of 
the car 3 and the number of broken main ropes 4 calculated based 
on the respective detection signals input . Through this comparison, 
the output portion 114 detects whether or not there is an abnormality 
in both the speed of the car 3 and the state of the main ropes 4. 

During normal operation, the speed of the car 3 has 
approximately the same value as the normal speed detection pattern, 
and the number of broken main ropes 4 is zero. Thus, the output 
portion 114 detects that there is no abnormality in either the speed 
of the car 3 or the state of the main ropes 4, and normal operation 
of the elevator continues. 

When, for example, the speed of the car 3 abnormally increases 
and exceeds the first abnormal speed detection pattern 116 (Fig. 
19) for some reason, the output portion 114 detects that there is 
an abnormality in the speed of the car 3. Then, the output portion 
114 outputs an actuation signal and a stop signal to the hoisting 
machine braking device 106 and the control panel 102, respectively. 
As a result, the hoisting machine 101 is stopped, and the hoisting 
machine raking device 106 is operated to brake the rotation of the 
drive sheave 104. 

Further, when at least one of the main ropes 4 has broken, 
the output portion 114 outputs an actuation signal and a stop signal 
to the hoisting machine braking device 106 and the control panel 
102, respectively, thereby braking the rotation of the drive sheave 
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104. 

If the speed of the car 3 continues to increase after the 
actuation of the hoisting machine braking device 106 and exceeds 
the second abnormal speed set value 117 (Fig. 19) , the output portion 
114 outputs an actuation signal to the safety device 33 while still 
outputting the actuation signal to the hoisting machine braking 
device 106. Thus, the safety device 33 is actuated and the car 3 
is braked through the same operation as that of Embodiment 2. 

Further, if all the main ropes 4 break after the actuation 
of the hoisting machine braking device 106, the output portion 114 
outputs an actuation signal to the safety device 33 while still 
outputting the actuation signal to the hoisting machine braking 
device 106. Thus, the safety device 33 is actuated. 

With such an elevator apparatus, the monitor device 108 obtains 
the speed of the car 3 and the state of the main ropes 4 based on 
the information from the detection means 112 for detecting the state 
of the elevator. When the monitor device 108 judges that there is 
an abnormality in the obtained speed of the car 3 or the obtained 
state of the main ropes 4 , the monitor device 108 outputs an actuation 
signal to at least one of the hoisting machine braking device 106 
and the safety device 33. This means that the number of targets 
for abnormality detection increases, allowing abnormality detection 
of not only the speed of the car 3 but also the state of the main 
ropes 4 . Accordingly, an abnormality in the elevator can be detected 
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earlier and more reliably. Therefore, it takes a shorter time for 
the braking force on the car 3 to be generated after occurrence 
of an abnormality in the elevator. 

It should be noted that in the above-described example, the 
rope sensor 132 is disposed in the rope fastening device 131 provided 
to the car 3. However, the rope sensor 132 may be disposed in a 
rope fastening device provided to the counterweight 107. 

Further, in the above-describedexample, the present invention 
is applied to an elevator apparatus of the type in which the car 
3 and the counterweight 107 are suspended in the hoistway 1 by 
connecting one end portion and the other end portion of the main 
rope 4 to the car 3 and the counterweight 107, respectively. However, 
the present invention may also be applied to an elevator apparatus 
of the type in which the car 3 and the counterweight 107 are suspended 
in the hoistway 1 by wrapping the main rope 4 around a car suspension 
sheave and a counterweight suspension sheave, with one end portion 
and the other end portion of the main rope 4 connected to structures 
arranged in the hoistway 1 . In this case, the rope sensor is disposed 
in the rope fastening device provided to the structures arranged 
in the hoistway 1. 

Embodiment 14 

Fig. 25 is a schematic diagram showing an elevator apparatus 
according to Embodiment 14 of the present invention. In this example. 
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a rope sensor 135 serving as a rope brake detecting portion is 
constituted by lead wires embedded in each of the main ropes 4. 
Each of the lead wires extends in the longitudinal direction of 
the rope 4. Both end portion of each lead wire are electrically 
connected to the output portion 114. A weak current flows in the 
lead wires. Cut-off of current flowing in each of the lead wires 
is input as a rope brake detection signal to the output portion 
114. 

Otherwise, this embodiment is of the same construction as 
Embodiment 13. 

With such an elevator apparatus, a break in any main rope 4 
is detected based on cutting off of current supply to any lead wire 
embedded in the main ropes 4. Accordingly, whether or not the rope 
has broken is more reliably detected without being affected by a 
change of tension of the main ropes 4 due to acceleration and 
deceleration of the car 3. 

Embodiment 15 

Fig. 2 6 is a schematic diagram showing an elevator apparatus 
according to Embodiment 15 of the present invention. In Fig. 26, 
the car position sensor 109, the car speed sensor 110, and a door 
sensor 140 are electrically connected to the output portion 114. 
The door sensor 140 serves as an entrance open/closed detecting 
portion for detecting open/closed of the car entrance 26. The 
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detection means 112 includes the car position sensor 109, the car 
speed sensor 110, and the door sensor 140. 

The door sensor 140 outputs a door-closed detection signal 
to the output portion 114 when the car entrance 26 is closed. The 
memory portion 113 stores the car speed abnormality determination 
criteria similar to that of Embodiment 11 shown in Fig. 19, and 
an entrance abnormality determination criteria used as a reference 
for judging whether or not there is an abnormality in the open/close 
state of the car entrance 26. If the car ascends/descends while 
the car entrance 2 6 is not closed, the entrance abnormality 
determination criteria regards this as an abnormal state. 

The output portion 114 calculates the position of the car 3 
based on the input position detection signal. The output portion 
114 also calculates the speed of the car 3 and the state of the 
car entrance 26 based on the input speed detection signal and the 
input door-closing detection signal, respectively, as a variety 
of (in this example, two) abnormality determination factors. 

The output portion 114 outputs an actuation signal to the 
hoisting machine braking device 104 if the car ascends/descends 
while the car entrance 26 is not closed, or if the speed of the 
car 3 exceeds the first abnormal speed detection pattern 116 (Fig. 
19) . If the speed of the car 3 exceeds the second abnormal speed 
detection pattern 117 (Fig. 19) , the output portion 114 outputs 
an actuation signal to the hoisting machine braking device 106 and 

66 



the safety device 33. 

Fig. 27 is a perspective view of the car 3 and the door sensor 
140 of Fig. 26. Fig. 28 is a perspective view showing a state in 
which the car entrance 26 of Fig. 27 is open. In Figs. 27 and 28, 
the door sensor 140 is provided at an upper portion of the car entrance 
26 and in the center of the car entrance 26 with respect to the 
width direction of the car 3. The door sensor 140 detects 
displacement of each of the car doors 28 into the door-closedposition, 
and outputs the door-closed detection signal to the output portion 
114. 

It should be noted that a contact type sensor, a proximity 
sensor, or the like may be used for the door sensor 140. The contact 
type sensor detects closing of the doors through its contact with 
a fixed portion secured to each of the car doors 28. The proximity 
sensor detects closing of the doors without contacting the car doors 
28. Further, a pair of hall doors 142 for opening/closing a hall 
entrance 141 are provided at the hall entrance 141. The hall doors 
142 are engaged to the car doors 28 by means of an engagement device 
(not shown) when the car 3 rests at a hall floor, and are displaced 
together with the car doors 28. 

Otherwise, this embodiment is of the same construction as 
Embodiment 1 1 . 

Next, operation is described. When the position detection 
signal, the speed detection signal, and the door-closed detection 
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signal are input to the output portion 114 from the car position 
sensor 109, the car speed sensor 110, and the door sensor 140, 
respectively, the output portion 114 calculates the position of 
the car 3, the speed of the car 3, and the state of the car entrance 
26 based on the respective detection signals thus input . After that, 
the output portion 114 compares the car speed abnormality 
determination criteria and the drive device state abnormality 
determination criteria obtained from the memory portion 113 with 
the speed of the car 3 and the state of the car of the car doors 
28 calculated based on the respective detection signals input. 
Through this comparison, the output portion 114 detects whether 
or not there is an abnormality in each of the speed of the car 3 
and the state of the car entrance 26. 

During normal operation, the speed of the car 3 has 
approximately the same value as the normal speed detection pattern, 
and the car entrance 26 is closed while the car 3 ascends/descends. 
Thus, the output portion 114 detects that there is no abnormality 
in each of the speed of the car 3 and the state of the car entrance 
26, and normal operation of the elevator continues. 

When, for instance, the speed of the car 3 abnormally increases 
and exceeds the first abnormal speed detection pattern 116 (Fig. 
19) for some reason, the output portion 114 detects that there is 
an abnormality in the speed of the car 3. Then, the output portion 
114 outputs an actuation signal and a stop signal to the hoisting 
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machine braking device 106 and the control panel 102, respectively. 
As a result, the hoisting machine 101 is stopped, and the hoisting 
machine braking device 106 is actuated to brake the rotation of 
the drive sheave 104. 

Further, the output portion 114 also detects an abnormality 
in the car entrance 26 when the car 3 ascends/descends while the 
car entrance 26 is not closed. Then, the output portion 114 outputs 
an actuation signal and a stop signal to the hoisting machine braking 
device 106 and the control panel 102, respectively, thereby braking 
the rotation of the drive sheave 104. 

When the speed of the car 3 continues to increase after the 
actuation of the hoisting machine braking device 106, and exceeds 
the second abnormal speed set value 117 (Fig. 19) , the output portion 
114 outputs an actuation signal to the safety device 33 while still 
outputting the actuation signal to the hoisting machine braking 
device 106. Thus, the safety device 33 is actuated and the car 3 
is braked through the same operation as that of Embodiment 2. 

With such an elevator apparatus, the monitor device 108 obtains 
the speed of the car 3 and the state of the car entrance 2 6 based 
on the information from the detection means 112 for detecting the 
state of the elevator. When the monitor device 108 judges that there 
is an abnormality in the obtained speed of the car 3 or the obtained 
state of the car entrance 26, the monitor device 108 outputs an 
actuation signal to at least one of the hoisting machine braking 
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device 106 and the safety device 33. This means that the number 
of targets for abnormality detection increases , allowing abnormality 
detection of not only the speed of the car 3 but also the state 
of the car entrance 26. Accordingly, abnormalities of the elevator 
can be detected earlier and more reliably. Therefore, it takes less 
time for the braking force on the car 3 to be generated after occurrence 
of an abnormality in the elevator. 

It should be noted that while in the above-described example, 
the door sensor 140 only detects the state of the car entrance 26, 
the door sensor 140 may detect both the state of the car entrance 
26 and the state of the elevator hall entrance 141. In this case, 
the door sensor 140 detects displacement of the elevator hall doors 
142 into the door-closed position, as well as displacement of the 
car doors 28 into the door-closed position. With this construction, 
abnormality in the elevator can be detected even when only the car 
doors 28 are displaced due to a problem with the engagement device 
or the like that engages the car doors 28 and the elevator hall 
doors 142 with each other. 

Embodiment 16 

Fig. 29 is a schematic diagram showing an elevator apparatus 
according to Embodiment 16 of the present invention. Fig. 30 is 
a diagram showing an upper portion of the hoistway 1 of Fig. 29. 
In Figs . 29 and 30, a power supply cable 150 is electrically connected 



to the hoisting machine 101 . Drive power is supplied to the hoisting 
machine 101 via the power supply cable 150 through control of the 
control panel 102. 

A current sensor 151 serving as a drive device detection portion 
is provided to the power supply cable 150. The current sensor 151 
detects the state of the hoisting machine 101 by measuring the current 
flowing in the power supply cable 150 . The current sensor 151 outputs 
to the output portion 114 a current detection signal (drive device 
state detection signal) corresponding to the value of a current 
in the power supply cable 150. The current sensor 151 is provided 
in the upper portion of the hoistway 1. A current transformer (CT) 
that measures an induction current generated in accordance with 
the amount of current flowing in the power supply cable 150 is used 
as the current sensor 151, for example. 

The car position sensor 109, the car speed sensor 110, and 
the current sensor 151 are electrically connected to the output 
portion 114 . The detect ionmeans 112 includes the car position sensor 
109, the car speed sensor 110, and the current sensor 151. 

The memory portion 113 stores the car speed abnormality 
determination criteria similar to that of Embodiment 11 shown in 
Fig. 19, and a drive device abnormality determination criteria used 
as a reference for determining whether or not there is an abnormality 
in the state of the hoisting machine 101. 

The drive device abnormality determination criteria has three 



detection patterns. That is, a normal level that is the current 
value flowing in the power supply cable 150 during normal operation, 
a first abnormal level having a larger value than the normal level, 
and a second abnormal level having a larger value than the first 
abnormal level, are set for the drive device abnormality 
determination criteria . 

The output portion 114 calculates the position of the car 3 
based on the input position detection signal. The output portion 
114 also calculates the speed of the car 3 and the state of the 
hoisting device 101 based on the input speed detection signal and 
the input current detection signal, respectively, as a variety of 
(in this example, two) abnormality determination factors. 

The output portion 114 outputs an actuation signal (trigger 
signal) to the hoisting machine braking device 106 when the speed 
of the car 3 exceeds the first abnormal speed detection pattern 

116 (Fig. 19), or when the amount of the current flowing in the 
power supply cable 150 exceeds the value of the first abnormal level 
of the drive device abnormality determination criteria. When the 
speed of the car 3 exceeds the second abnormal speed detection pattern 

117 (Fig. 19), or when the amount of the current flowing in the 
power supply cable 150 exceeds the value of the second abnormal 
level of the drive device abnormality determination criteria, the 
output portion 114 outputs an actuation signal to the hoistingmachine 
braking device 106 and the safety device 33. That is, the output 



portion 114 determines to which braking means it should output the 
actuation signals according to the degree of abnormality in each 
of the speed of the car 3 and the state of the hoisting machine 
101. 

Otherwise, this embodiment is of the same construction as 
embodiment 1 1 . 

Next, operation is described. When the position detection 
signal, the speed detection signal, and the current detection signal 
are input to the output portion 114 from the car position sensor 
109, the car speed sensor 110, and the current sensor 151, respectively, 
the output portion 114 calculates the position of the car 3, the 
speed of the car 3, and the amount of current flowing in the power 
supply cable 151 based on the respective detection signals thus 
input. After that, the output portion 114 compares the car speed 
abnormality determination criteria and the drive device state 
abnormality determination criteria obtained from the memory portion 
113 with the speed of the car 3 and the amount of the current flowing 
into the current supply cable 150 calculated based on the respective 
detection signals input. Through this comparison, the output 
portion 114 detects whether or not there is an abnormality in each 
of the speed of the car 3 and the state of the hoisting machine 
101. 

During normal operation, the speed of the car 3 has 
approximately the same value as the normal speed detection pattern 



115 (Fig. 19) , and the amount of current flowing in the power supply 
cable 150 is at the normal level . Thus, the output portion 114 detects 
that there is no abnormality in each of the speed of the car 3 and 
the state of the hoisting machine 101, and normal operation of the 
elevator continues . 

If, for instance, the speed of the car 3 abnormally increases 
and exceeds the first abnormal speed detection pattern 116 (Fig. 
19) for some reason, the output portion 114 detects that there is 
an abnormality in the speed of the car 3. Then, the output portion 
114 outputs an actuation signal and a stop signal to the hoisting 
machine braking device 106 and the control panel 102, respectively. 
As a result, the hoisting machine 101 is stopped, and the hoisting 
machine braking device 106 is actuated to brake the rotation of 
the drive sheave 104. 

If the amount of current flowing in the power supply cable 
150 exceeds the first abnormal level in the drive device state 
abnormality determination criteria, the output portion 114 outputs 
an actuation signal and a stop signal to the hoisting machine braking 
device 106 and the control panel 102, respectively, thereby braking 
the rotation of the drive sheave 104. 

When the speed of the car 3 continues to increase after the 
actuation of the hoisting machine braking device 106, and exceeds 
the second abnormal speed set value 117 (Fig. 19) , the output portion 
114 outputs an actuation signal to the safety device 33 while still 



outputting the actuation signal to the hoisting machine braking 
device 106. Thus, the safety device 33 is actuated and the car 3 
is braked through the same operation as that of Embodiment 2. 

When the amount of current flowing in the power supply cable 
150 exceeds the second abnormal level of the drive device state 
abnormality determination criteria after the actuation of the 
hoisting machine braking device 106, the output portion 114 outputs 
an actuation signal to the safety device 33 while still outputting 
the actuation signal to the hoisting machine braking device 106. 
Thus, the safety device 33 is actuated. 

With such an elevator apparatus , the monitor device 108 obtains 
the speed of the car 3 and the state of the hoisting machine 101 
based on the information from the detection means 112 for detecting 
the state of the elevator. When the monitor device 108 judges that 
there is an abnormality in the obtained speed of the car 3 or the 
state of the hoisting machine 101, the monitor device 108 outputs 
an actuation signal to at least one of the hoisting machine braking 
device 106 and the safety device 33. This means that the number 
of targets for abnormality detection increases, and it takes a shorter 
time for the braking force on the car 3 to be generated after occurrence 
of an abnormality in the elevator. 

It should be noted that in the above-described example, the 
state of the hoisting machine 101 is detected using the current 
sensor 151 for measuring the amount of the current flowing in the 



power supply cable 150. However the state of the hoisting machine 
101 may be detected using a temperature sensor for measuring the 
temperature of the hoisting machine 101. 

Further, in Embodiments 11 through 16 described above, the 
output portion 114 outputs an actuation signal to the hoistingmachine 
braking device 106 before outputting an actuation signal to the 
safety device 33 . However, the output portion 114 may instead output 
an actuation signal to one of the following brakes: a car brake 
for braking the car 3 by gripping the car guide rail 2, which is 
mounted on the car 3 independently of the safety device 33; a 
counterweight brake mounted on the counterweight 107 for braking 
the counterweight 107 by gripping a counterweight guide rail for 
guiding the counterweight 107 ; and a rope brake mounted in the hoistway 
1 for braking the main ropes 4 by locking up the main ropes 4. 

Further, in Embodiments 1 through 16 described above, the 
electric cable is used as the transmitting means for supplying power 
from the output portion to the safety device. However, a wireless 
communication device having a transmitter provided at the output 
portion and a receiver provided at the safety device may be used 
instead. Alternatively, an optical fiber cable that transmits an 
optical signal may be used. 

Further, in Embodiments 1 through 16, the safety device applies 
braking with respect to overspeed (motion) of the car in the downward 
direction. However, the safety device may apply braking with respect 



to overspeed (motion) of the car in the upward direction by using 
the safety device fixed upside down to the car. 

Embodiment 17 

Next, Fig. 31 is a block diagram showing an essential part 
of an elevator control apparatus according to Embodiment 17 of the 
present invention. The elevator control apparatus of Embodiment 
17 employs dual-system safety system equipments 201 and 202 for 
the purpose of enhancing reliability. The dual-system circuit 
arrangement is also adopted in the control units for controlling 
the safety system equipments 201 and 202. Therefore, the elevator 
control apparatus employs first and second CPU's (processing 
portions) 203 and 204. 

The first CPU 203 outputs a control signal to a first output 
interface (output portion) 205. The second CPU 204 outputs the 
control signal to a second output interface (output portion) 206. 

The first and second output interfaces 205 and 206 drive and 
control the safety system equipments 201 and 202 based on the control 
signals from the first and second CPU ' s 203 and 204 . Upon receiving 
actuation signals (command signals) from the first and second output 
interfaces 205 and 206, the safety system equipments 201 and 202 
operate to shift the elevator to a safe state. 

As for the safety system equipments 201 and 202, the safety 
gears (direct-driving safety gears) 5, 33, 77, and 78 can be given 



as examples. Further, the safety system equipments 201 and 202 are 
provided on or in the vicinity of a speed governor and may be designed 
as electronic governors (direct-acting rope catches) each having 
an actuator portion for gripping a rope of the speed governor in 
response to the input of the actuation signal. 

A two-port RAM 207 is connected to the first and second CPU's 
203 and 204 to exchange data therebetween. A signal from a first 
sensor 208 is input to the first CPU 203. A signal from a second 
sensor 209 is input to the second CPU 204. 

The signals from the sensors 208 and 209 are subjected to 
calculation processings in the CPU's 203 and 204, whereby the speed 
and position of the car 3 (Fig. 1) is calculated. That is, the sensors 
208 and 209 function as both speed sensors and position sensors. 

The sensors 208 and 209 are provided, for example, on the speed 
governor described in the above-mentioned embodiments. Employed 
as the sensors 208 and 209 are, for example, encoders. In addition, 
as described in the above-mentioned embodiments, the various sensors 
used to monitor the safety system of the elevator apparatus may 
be employed as the sensors 208 and 209. 

The result data on the calculation processings in the CPU's 
203 and 204 are exchanged between the CPU's 203 and 204 via the 
two-port RAM 207. The result data are compared with each other in 
the CPU's 203 and 204. If a significant difference is recognized 
in the calculated results or an overspeed (excess of speed) is 
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confirmed, the safety system equipments 201 and 202 are driven via 
the output interfaces 205 and 206, so that the elevator is shifted 
to the safe state. 

The elevator control apparatus is provided with a +5 V-power 
supply voltage monitoring circuit 211 for monitoring the power supply 
voltage of the CPU 203 and a +3.3 V-power supply voltage monitoring 
circuit 212 for monitoring the power supply voltage of the CPU 204. 
The power supply voltage monitoring circuits 211 and 212 are 
constituted by, for example, integrated circuits (IC's). 

The power supply voltage monitoring circuits 211 and 212 
monitor whether stable power supply voltages are supplied to the 
CPU's 203 and 204. When an abnormality in power supply voltage 
exceeding the rated voltages of the CPU's 203 and 204 occurs, the 
CPU's 203 and 204 are forcibly reset based on the information from 
the power supply voltage monitoring circuits 203 and 204, and the 
elevator is shifted to the safe state by the safety system equipments 
201 and 202, designed for f ailsaf eness . 

The monitoring voltage is input to the +5 V-power supply voltage 
monitoring circuit 211 from a first monitoring voltage input circuit 
213. The monitoring voltage is input to the +3.3 V-power supply 
voltage monitoring circuit 212 from a second monitoring voltage 
input circuit 214. 

A voltage monitoring soundness checking function circuit 215 
(hereinafter abbreviated as the checking function circuit 215) for 



monitoring the soundness of the power supply voltage monitoring 
circuits 211 and 212 is connected to the power supply voltage 
monitoring circuits 211 and 212 and the CPU's 203 and 204. The 
checking function circuit 215 is constituted by, for example, a 
programmable gate IC such as a field programmable gate array (FPGA) 
or the like. Alternatively, the checking function circuit 215 can 
also be realized by an ASIC, a CPLD, a PLD, a gate array, or the 
like . 

When an abnormality in power supply voltage is detected, 
voltage abnormality detection signals 301 and 302 are output to 
the checking function circuit 215 from the power supply voltage 
monitoring circuits 211 and 212, and reset signals 303 and 304 are 
output from the checking function circuit 215 to the CPU's 203 and 
204. 

Control signals 305 and 306 are input to the checking function 
circuit 215 from the CPU's 203 and 204. Monitoring input voltage 
forcible change signals 307 and 308 for forcibly changing voltages 
applied to input pins of the power supply voltage monitoring circuits 
211 and 212 into low voltages are output from the checking function 
circuit 215. 

When the monitoring input voltage forcible change signals 307 
and 308 are output, monitoring input. voltage forcible change circuits 
216 and 217 forcibly lower the voltages applied to the input pins 
of the power supply voltage monitoring circuits 211 and 212. 
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The checking function circuit 215 is connected to a first data 
bus 218 for the first CPU 203 and a second data bus 219 for the 
second CPU 204 . 

A program for calculating the position and the speed of the 
car 3, a program for making a determination on an abnormality in 
the elevator, a program for confirming the soundness of the power 
supply voltage monitoring circuits 211 and 212, and the like are 
stored in a ROM (not shown) as a storage portion connected to the 
CPU's 203 and 204. The elevator control apparatus of Embodiment 
17 includes a computer (microcomputer) including the CPU's 203 and 
204 and the two-port RAM 207 shown in Fig. 31, a ROM, and the like. 

Fig. 32 is a circuit diagram showing an example of a concrete 
configuration of the checking function circuit 215 in Fig. 31. 

The control signals 305 and 306 include selection signals 309 
and 310, output permission signals 311 and 312, and chip selection 
signals 313 and 314. 

The selection signals 309 and 310 are two-bit signals for 
choosing which one of the power supply voltage monitoring circuits 
211 and 212 should be checked in soundness. The output permission 
signals 311 and 312 permit the monitoring input voltage forcible 
change signals 307 and 308 to be output from the checking function 
circuit 215, and latch the contents selected by the selection signals 
309 and 310. In other words, the output permission signals also 
serve as latch trigger signals. 
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When an abnormality in power supply voltage is detected^ a 
voltage abnormality signal latch circuit 228 in the checking function 
circuit 215 latches the voltage abnormality detection signals 301 
and 302 . Latched states, of these signals in the voltage abnormality 
signal latch circuit 228, are released when latch release signals 
315 and 316 constituting parts of the control signals 305 and 306 
are input . 

The selection signals 309 and 310 are input to first and second 
selectors 229 and 230. The first and second selectors 229 and 230 
make a changeover in choosing which one of the power supply voltage 
monitoring circuits 211 and 212 should be checked in soundness, 
based on the selection signals 309 and 310 • First and second selected 
content latch circuits 231 and 232 latch the contents selected by 
the selectors 229 and 230. 

A change signal output buffer 233 is interposed in a stage 
preceding the outputting of the monitoring input voltage forcible 
change signals 307 and 308. 

The checking function circuit 215 is also provided with a 
plurality of data bus output buffers 234 for the first CPU 203 and 
a plurality of data bus output buffers 235 for the second CPU 204. 

Fig. 33 is a chart for explaining the meaning of data on 
respective bits of the data buses 218 and 219 at the time when the 
first and second CPU ' s 203 and 204 read data from the checking function 
circuit 215 in Fig. 31. 
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Next, Fig. 34 is a flowchart showing a method of checking power 
supply voltage monitoring soundness on the first CPU 203 side in 
Fig. 31. The elevator control apparatus performs interrupt 
calculation including a calculation processing for monitoring an 
abnormality in the elevator, such as an overspeed of the car in 
each interval of a calculation cycle time (e.g., 5 milliseconds) . 
In executing a main routine of interrupt calculation, the elevator 
control apparatus determines whether to check the soundness of the 
power supply voltage monitoring circuits 211 and 212 or not (step 
SI) . 

A check of soundness is carried out at a preset timing. In 
other words, a check of soundness is carried out when the preset 
time has elapsed since the stoppage of the car. More specifically, 
a check of soundness is carried out in off hours when the number 
of passengers utilizing the elevator is small, in the nighttime 
when the operation of the elevator is stopped, etc. 

When the soundness is not checked, a return to the main routine 
is made. In checking the soundness, first of all, the latched states 
of the voltage abnormality detecting signals 301 and 302 as error 
signals in the checking function circuit 215 are released. In other 
words, the latch release signal 315 is output to the checking function 
circuit 215 (step S2) . The latch release signal 315 is input to 
the voltage abnormality signal latch circuit 228, and the latched 
states of the voltage abnormality detection signals 301 and 302 
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are released. 

Then, after it has been confirmed that the output permission 
signal 311 for the first CPU 203 is high in level (step S3) , a request 
to render the output permission signal 312 high in level is made 
to the second CPU 204 as well via the two-port RAM 207 (step S4) . 

After that, the selection signal 309 for choosing which one 
of the power supply voltage monitoring circuits 211 and 212 should 
be checked in soundness is output to the checking function circuit 
215 and is latched (step S5) . 

Subsequently, a request to render the output permission signal 
312 low in level is made to the CPU 204 via the two-port RAM 207 
(step S6) . After the output permission signal 312 low in level has 
been confirmed, the output permission signal 311 is rendered low 
in level (step S7) . Thus, in the checking function circuit 215, 
the selected content latch circuit 231 latches the selection signal 
309 in synchronism with the falling of the output permission signal 
311. The monitoring input voltage forcible change signal 307 is 
then output from the checking function circuit 215 to the power 
supply voltage monitoring circuit 211. 

As a result, an abnormality in voltage is detected in the power 
supply voltage monitoring circuit 211, and the voltage abnormality 
detection signal 301 is input to the checking function circuit 215. 
Then, in the checking function circuit 215, the voltage abnormality 
signal latch circuit 228 latches the voltage abnormality detection 
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signal 301. At the same time, the reset signals 303 and 304 from 
the checking function circuit 215 are input to the CPU's 203 and 
204 (step S8), whereby the CPU's 203 and 204 are reset. 

At that time, it is indispensable that only one power supply 
voltage monitoring circuit is checked during a single soundness 
checking operation. When the soundness of another power supply 
voltage monitoring circuit is checked in succession, the soundness 
of this power supply voltage monitoring circuit is checked only 
after the soundness of the preceding power supply voltage monitoring 
circuit has been checked. Also, in the case where a plurality of 
power supply voltage monitoring circuits are provided because a 
plurality of different voltages are supplied to a single CPU from 
a plurality of power sources, those respective power supply voltage 
monitoring circuits are sequentially checked in soundness one by 
one. Such a sequential check of the soundness of a plurality of 
power supply voltage monitoring circuits can be set on a program 
(software) in advance. 

Fig. 35 is a flowchart showing the operation where the CPU's 
203 and 204 are reset in the elevator control apparatus of Fig. 
31. Needless to say, the CPU's 203 and 204 may be reset for various 
reasons including a genuine abnormality in power supply voltage 
as well as checking of soundness. 

When being reset, the CPU's 203 and 204 first start an 
initialization processing of the software (step S9) . Next, in the 
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course of the initialization processing, data obtained from the 
checking function circuit 215 are read (stepSlO). Then, apre-reset 
situation is confirmed from the latched contents, and it is determined 
whether or not there is an abnormality in power supply voltage or 
a malfunction in the power supply voltage monitoring circuits 211 
and 212 (step Sll) . In other words, it is determined whether the 
CPU's 203 and 204 were reset because of a check of soundness or 
a genuine abnormality in power supply voltage. 

For instance, when an abnormality in voltage is indicated 
despite the fact that the outputs of the output permission signals 
311 and 312 have not been rendered low in level, it is determined 
that a genuine abnormality in power supply voltage has occurred. 
In contrast, when the data obtained from the checking function circuit 
215 indicate no abnormality in voltage despite the fact that the 
outputs of the output permission signals 311 and 312 have been rendered 
low in level, it is determined that there is a malfunction in the 
power supply voltage monitoring circuits 211 and212 or in the checking 
function circuit 215 itself. If the monitoring input voltage 
forcible change signals 307 and 308 have been output in this state, 
it is determined that there is a malfunction in the power supply 
voltage monitoring circuits 211 and 212. If the monitoring input 
voltage forcible change signals 307 and 308 have not been output, 
it is determined that there is a malfunction in the checking function 
circuit 215 itself. 
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When no abnormality or malfunction is detected as a result 
of reading the data obtained from the checking function circuit 
215, a transition to the main routine is permitted (step S12) . 
Although the present description exclusively deals with reset about 
power supply voltage, reset may be performed in response to detection 
of another malfunction or a check of the soundness of another circuit . 
In this case, a transition to the main routine is permitted after 
it has been confirmed that there is absolutely no abnormality or 
malfunction . 

When some abnormality or malfunction is detected as a result 
of reading the data obtained from the checking function circuit 
215, a command signal for operating the safety system equipments 
201 and 202 is output (step S13) , and the elevator is shifted to 
the safe state. 

With the elevator control apparatus described above, soundness 
can be monitored in respect of a malfunction in the power supply 
voltage monitoring circuits 211 and 212 as well as the abnormality 
in power supply voltage. This makes it possible to achieve further 
enhancement of reliability of the monitoring of power supply voltage . 

Conventionally, the dual systems are used for the respective 
power supply voltage monitoring circuits for the sake of f ailsaf eness 
or the securement of safety. However, since this is unnecessary 
in the above-mentioned elevator control apparatus, it is possible 
to achieve simple configuration and suppress the increase in cost. 
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Moreover, the reliability of the above-mentioned elevator control 
apparatus is equal to that of power supply voltage monitoring circuits 
adopting dual systems. 

Furthermore, since the dual-system circuit arrangement 
employing the two CPU's 203 and 204 is adopted and the operations 
of checking soundness by means of the CPU' s 203 and 204 can be mutually 
confirmed via the two-port RAM 207, a malfunction in the checking 
function circuit 215 or software can also be detected. 

The safety system of Embodiment 17 can be provided either as 
part of an operation control unit (control panel) or independently 
of the operation control unit. 

Although the safety system is described as the elevator control 
apparatus in Embodiment 17, the present invention is also applicable 
to an operation control unit serving as an elevator control apparatus . 

In addition, although the dual-system circuit arrangement 
employing the two CPU's 203 and 204 is adopted in Embodiment 17, 
the present invention is also applicable to an elevator control 
apparatus performing calculation processings by means of a single 
CPU. In this case, an abnormality in power supply voltage and a 
malfunction in a power supply voltage monitoring circuit can be 
discriminated from each other using data obtained from a voltage 
monitoring soundness checking function circuit. 

Embodiment 18 
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Next, Fig. 36 is a schematic diagram showing an elevator 
apparatus according to Embodiment 18 of the present invention. 
Referring to the figure, a drive device (hoisting machine) 251 and 
a deflector pulley 252 are provided on the upper portion of a hoistway . 
The drive device 251 has a drive sheave 251a and a motor portion 
(drive device main body) 251b, which rotates the drive, sheave 251a. 
The motor portion 251b is provided with an electromagnetic braking 
device for braking rotation of the drive sheave 251a. 

A main rope 253 is wound around the drive sheave 251a and the 
deflector pulley 252 . A car 254 and a counterweight 255 are suspended 
within the hoistway by means of the main rope 253. 

A mechanical safety gear 256 for stopping the car 254 as an 
emergency measure through engagement with a guide rail (not shown) 
is mounted on a lower portion of the car 254 . A speed governor sheave 
257 is disposed on the upper portion of the hoistway. A tension 
pulley 258 is disposed on the lower portion of the hoistway. A speed 
governor rope 259 is wound around the speed governor sheave 257 
and the tension pulley 258 . The speed governor rope 259 is connected 
at both end portions to an actuating lever 256a of the safety gear 
256. Thus, the speed governor sheave 257 is rotated at the speed 
corresponding to the running speed of the car 254. 

The speed governor sheave 257 is provided with sensors 208 
and 209 composed of encoders outputting signals for detecting a 
position and a speed of the car 254. The signals from the sensors 
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208 and 209 are input to an elevator control apparatus 260. The 
elevator control apparatus 260 is configured in the same manner 
as shown in Fig. 31. 

A speed governor rope grip device (rope catch) 261 serving 
as the safety system equipments 201 and 202 for gripping the speed 
governor rope 259 and stopping circulation thereof is provided on 
the upper portion of the hoistway (on or in the vicinity of the 
speed governor sheave 257). The speed governor rope grip device 
261 has a grip portion 261a for gripping the speed governor rope 

259 and an electromagnetic actuator 261b for driving the grip portion 
261a. 

When an actuation signal from the elevator control apparatus 

260 is input to the speed governor rope grip device 261, the grip 
portion 261a is displaced due to a driving force of the electromagnetic 
actuator 261b, and the speed governor rope 259 is stopped. When 
the speed governor rope 259 is stopped, the actuating lever 256a 
is operated due to a movement of the car 254, the safety gear 256 
operates, and the car 254 suddenly stops. 

In the elevator control apparatus described above, an actuation 
signal is input to the speed governor rope grip device 2 61 when 
an abnormality in the elevator such as an overspeed of the car 254 
or the like is detected, and the car 254 suddenly stops. 

The elevator is shifted to a safe state also when an abnormality 
is detected by the power supply voltage monitoring circuits 211 
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and 212 or the checking function circuit 215 shown in Fig. 31. 

As a method of shifting the elevator to a safe state, it is 
conceivable, for example, to immediately stop the car 254 by stopping 
the rotation of the drive sheave 251a or to suddenly stop the car 
254 by means of the speed governor rope grip device 261. 
Alternatively, it is also conceivable to stop the car 254 after 
having moved it to the nearest floor by controlling the drive device 
251. 

As described above, the elevator control apparatus according 
to the present invention is also applicable to an elevator apparatus 
employing a speed governor rope grip device as a safety system 
equipment . 
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